CVE-2020-5908 - In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files

MEDIUM

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files

Published Jul 1, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.35%

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Edge Client for Linux

n/a

Version	Status	Constraints
12.1.0-12.1.5, 11.6.1-11.6.5.2	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-532

https://support.f5.com/csp/article/K33023560
x_refsource_MISCVendor Advisory
https://www.kb.cert.org/vuls/id/290915
third-party-advisoryx_refsource_CERT-VNThird Party Advisory

Link	Providers	Tags
https://support.f5.com/csp/article/K33023560		x_refsource_MISCVendor Advisory
https://www.kb.cert.org/vuls/id/290915		third-party-advisoryx_refsource_CERT-VNThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner f5

Published Jul 1, 2020

Updated Aug 4, 2024

Reserved Jan 6, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a