CVSS 6.5 · Medium EPSS 0,20%
Kerentanan Uncontrolled Search Path Element pada f5 big-ip access policy manager, f5 big-ip edge. Skor CVSS 3.1 6.5 (Medium) menurut f5.com.
On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip access policy manager | Versi 7.2.2 hingga sebelum 7.2.3.1 |
| f5 | big-ip access policy manager | Versi 13.1.0 hingga 13.1.5 |
| f5 | big-ip access policy manager | Versi 14.1.0 hingga 14.1.5 |
| f5 | big-ip access policy manager | Versi 15.1.0 hingga 15.1.8 |
| f5 | big-ip access policy manager | Versi 16.1.0 hingga 16.1.3 |
| f5 | big-ip access policy manager | Versi 17.0.0 hingga sebelum 17.0.0.2 |
| f5 | big-ip edge | Semua versi |