CVE-2020-5851: F5 BIG-IP Access Policy Manager

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG

Affected products

F5 BIG-IP Access Policy Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Advanced Firewall Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Analytics: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Application Acceleration Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Application Security Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Domain Name System: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Edge Gateway: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Fraud Protection Service: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Global Traffic Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Link Controller: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Local Traffic Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Policy Enforcement Manager: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only
F5 BIG-IP Webaccelerator: version 14.1.0.2.0.45.4 only; version 14.1.0.2.0.62.4 only

Published 2020-01-14. Last modified 2026-06-17.