On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials…

Description

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace.

Scores

EPSS (exploitation in 30 days)

0.47% · top 59% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

• Information Disclosure
• CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

• BIG-IP

  • affected 15.0.0-15.0.1
  • affected 14.1.0-14.1.2.3
  • affected 13.1.0-13.1.3.3
  • affected 12.1.0-12.1.5.1

• BIG-IQ

  • affected 5.2.0-7.1.0

References (1)

• https://support.f5.com/csp/article/K03318649 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2020-5890](https://trackcve.app/badge/CVE-2020-5890.svg)](https://trackcve.app/cve/CVE-2020-5890)

Record last updated 4 Aug 2024, 08:47 UTC.