CVE-2020-5890: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

A vulnerability identified as CVE-2020-5890 affects F5's BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, as well as BIG-IQ versions 5.2.0-7.1.0. The issue involves improper credential obfuscation when creating a QKView, specifically when the credentials for LDAP server binding contain whitespace (CVE Mitre).

The vulnerability has been assigned a CVSS v3.1 score of 6.7 (MEDIUM) and a CVSS v2.0 score of 4.6 (MEDIUM). The issue specifically manifests when generating QKView files, where the system fails to properly obfuscate credentials used for LDAP server authentication if these credentials contain whitespace characters (NVD Results).

The vulnerability could potentially expose sensitive authentication credentials used for LDAP server binding in the BIG-IP administrative interface, particularly when these credentials contain whitespace characters. This exposure could lead to unauthorized access to LDAP authentication systems (CVE Mitre).

F5 Networks has acknowledged the vulnerability and provided information about the issue in their support article. Users are advised to refer to the official F5 Networks support documentation for specific mitigation steps (F5 Support).