For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tux143's avatar
tux143
Icon for Cirrus rankCirrus
Jul 10, 2020

TMUI RCE vulnerability CVE-2020-5902

I am trying to secure F5 from recent exploit. Reading here https://support.f5.com/csp/article/K52145254   Its setting up 404 Redirect to avoid that directory travel so question is do should i rem...
application delivery
BIG-IP
devops
LTM
Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Jul 12, 2020

In the existing file there if no previous INCLUDE entry it should have following line

 

"include none" and make sure when you adding exact above same content you remove include none. Other wise you will have include word.