CVE-2020-5902 Analysis, F5 BIG-IP RCE Vulnerability

This report analyzes CVE-2020-5902, a critical remote code execution vulnerability in F5 BIG-IP TMUI (CVSS 10). It details affected versions, PoC curl commands for arbitrary file read and tmsh command execution, step-by-step reproduction, the root cause (inconsistent URL parsing between Apache and Tomcat enabling "/..;/" bypass), and a temporary httpd configuration mitigation; the report also notes widespread exploitation activity following public disclosure.