CVE-2020-5902 F5 BIG-IP Exploitation Attempt

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•25

Detects exploitation attempts targeting the F5 BIG-IP vulnerability CVE-2020-5902. The rule looks for specific URI query patterns indicative of directory traversal within the '/tmui/' or '/hsqldb' paths, which are known to be vulnerable.