f5 big-ip access policy manager, f5 big-ip advanced web application firewall, f5 big-ip application security manager +1 lainnya
CVSS 7.2 · High EPSS 1,5%
Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada f5 big-ip access policy manager, f5 big-ip advanced web application firewall +2 lainnya. Skor CVSS 3.1 7.2 (High) menurut NVD.
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing command injection vulnerabilities in undisclosed URIs in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip access policy manager | Versi 13.1.0 |
| f5 | big-ip access policy manager | Versi 13.1.1 |
| f5 | big-ip access policy manager | Versi 13.1.3 |
| f5 | big-ip access policy manager | Versi 13.1.4 |
| f5 | big-ip access policy manager | Versi 13.1.5 |
| f5 | big-ip access policy manager | Versi 14.1.0 |
| f5 | big-ip access policy manager | Versi 14.1.2 |
| f5 | big-ip access policy manager | Versi 14.1.3 |
| f5 | big-ip access policy manager | Versi 14.1.4 |
| f5 | big-ip access policy manager | Versi 15.1.0 |
| f5 | big-ip access policy manager | Versi 15.1.1 |
| f5 | big-ip access policy manager | Versi 15.1.2 |
| f5 | big-ip access policy manager | Versi 15.1.3 |
| f5 | big-ip access policy manager | Versi 15.1.4 |
| f5 | big-ip access policy manager | Versi 15.1.5 |
| f5 | big-ip access policy manager | Versi 16.1.0 |
| f5 | big-ip access policy manager | Versi 16.1.1 |
| f5 | big-ip access policy manager | Versi 16.1.2 |
| f5 | big-ip advanced web application firewall | Versi 13.1.0 |
| f5 | big-ip advanced web application firewall | Versi 13.1.1 |
| f5 | big-ip advanced web application firewall | Versi 13.1.3 |
| f5 | big-ip advanced web application firewall | Versi 13.1.4 |
| f5 | big-ip advanced web application firewall | Versi 13.1.5 |
| f5 | big-ip advanced web application firewall | Versi 14.1.0 |
| f5 | big-ip advanced web application firewall | Versi 14.1.2 |
| f5 | big-ip advanced web application firewall | Versi 14.1.3 |
| f5 | big-ip advanced web application firewall | Versi 14.1.4 |
| f5 | big-ip advanced web application firewall | Versi 15.1.0 |
| f5 | big-ip advanced web application firewall | Versi 15.1.1 |
| f5 | big-ip advanced web application firewall | Versi 15.1.2 |
| f5 | big-ip advanced web application firewall | Versi 15.1.3 |
| f5 | big-ip advanced web application firewall | Versi 15.1.4 |
| f5 | big-ip advanced web application firewall | Versi 15.1.5 |
| f5 | big-ip advanced web application firewall | Versi 16.1.0 |
| f5 | big-ip advanced web application firewall | Versi 16.1.1 |
| f5 | big-ip advanced web application firewall | Versi 16.1.2 |
| f5 | big-ip application security manager | Versi 13.1.0 |
| f5 | big-ip application security manager | Versi 13.1.1 |
| f5 | big-ip application security manager | Versi 13.1.3 |
| f5 | big-ip application security manager | Versi 13.1.4 |
| f5 | big-ip application security manager | Versi 13.1.5 |
| f5 | big-ip application security manager | Versi 14.1.0 |
| f5 | big-ip application security manager | Versi 14.1.2 |
| f5 | big-ip application security manager | Versi 14.1.3 |
| f5 | big-ip application security manager | Versi 14.1.4 |
| f5 | big-ip application security manager | Versi 15.1.0 |
| f5 | big-ip application security manager | Versi 15.1.1 |
| f5 | big-ip application security manager | Versi 15.1.2 |
| f5 | big-ip application security manager | Versi 15.1.3 |
| f5 | big-ip application security manager | Versi 15.1.4 |
| f5 | big-ip application security manager | Versi 15.1.5 |
| f5 | big-ip application security manager | Versi 16.1.0 |
| f5 | big-ip application security manager | Versi 16.1.1 |
| f5 | big-ip application security manager | Versi 16.1.2 |
| f5 | big-ip guided configuration | Semua versi sebelum 9.0 |