Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-7032
HistoryAug 24, 2009 - 10:30 a.m.

CVE-2008-7032

2009-08-2410:30:01
CWE-352
[email protected]
web.nvd.nist.gov
19
cve-2008-7032
web management console
csrf vulnerability
f5 big-ip
remote attackers
authentication hijacking
administrators
shell commands
tmui/control/form
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form.

Affected configurations

NVD
Node
f5big-ipMatch9.4.3
CPENameOperatorVersion
f5:big-ipf5 big-ipeq9.4.3

Related

f5 4
nessus 2
prion 1
cvelist 1
nvd 1
f5
f5
SOL8599 - Cross-site scripting vulnerability viewing logs from the Console section of the web management interface
2008-04-13 00:00:00
K8599 : XSS vulnerability viewing logs from the Console section of the web management interface
2013-03-19 00:00:00
K8602 : XSS vulnerability viewing logs from the web management interface
2013-03-19 00:00:00
nessus
nessus
F5 Networks BIG-IP : XSS vulnerability viewing logs from the Console section of the web management interface (SOL8599)
2014-10-10 00:00:00
F5 Networks BIG-IP : XSS vulnerability viewing logs from the web management interface (SOL8602)
2014-10-10 00:00:00
prion
prion
Cross site request forgery (csrf)
2009-08-24 10:30:00
cvelist
cvelist
CVE-2008-7032
2009-08-24 10:00:00
nvd
nvd
CVE-2008-7032
2009-08-24 10:30:01

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON
Related for CVE-2008-7032
f54nessus2prion1cvelist1nvd1