CVE-2020-5920: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

CVE-2020-5920 is a vulnerability discovered in F5 BIG-IP's AFM Configuration utility that affects versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1. The vulnerability was disclosed on August 26, 2020, and allows any authenticated BIG-IP user to perform a read-only blind SQL injection attack (CVE Mitre).

The vulnerability exists in the BIG-IP AFM Configuration utility and enables authenticated users to perform a read-only blind SQL injection attack. This affects multiple BIG-IP modules including LTM, AAM, Advanced WAF, AFM, Analytics, APM, ASM, DDHD, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, SSLO, and WebAccelerator (CERT-FR).

The vulnerability allows authenticated users to potentially access sensitive information through blind SQL injection techniques. This could lead to unauthorized access to configuration data and other sensitive information stored in the AFM Configuration utility's database (CVE Mitre).

The vulnerability requires authentication to exploit, meaning an attacker would need valid credentials to the BIG-IP system to attempt exploitation. The attack vector is through the AFM Configuration utility interface (CVE Mitre).

F5 has released patched versions to address this vulnerability. Users should upgrade to versions 15.1.0.5, 14.1.2.7, 13.1.3.4, 12.1.5.1, or 11.6.5.1 or later depending on their current version track (CERT-FR).