CVE-2012-3000

2014-01-3015:06:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2012-3000

sql injection

sam

admin

reports

savesettings.php

apm webgui

f5 big-ip

ltm

gtm

asm

link controller

psm

apm

edge gateway

analytics

avr webgui

webaccelerator

wom 11.2.x

nvd

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.0%

JSON

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.

CPENameOperatorVersion
f5:big-ip_webacceleratorf5 big-ip webacceleratoreq11.2.0
f5:big-ip_webacceleratorf5 big-ip webacceleratoreq11.0.0
f5:big-ip_webacceleratorf5 big-ip webacceleratoreq11.1.0
f5:big-ip_webacceleratorf5 big-ip webacceleratoreq11.2.1
f5:big-ip_global_traffic_managerf5 big-ip global traffic managereq11.0.0
f5:big-ip_global_traffic_managerf5 big-ip global traffic managereq11.2.0
f5:big-ip_global_traffic_managerf5 big-ip global traffic managereq11.1.0
f5:big-ip_global_traffic_managerf5 big-ip global traffic managereq11.2.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.0.0
f5:big-ip_local_traffic_managerf5 big-ip local traffic managereq11.2.1

CPE	Name	Operator	Version
f5:big-ip_webaccelerator	f5 big-ip webaccelerator	eq	11.2.0
f5:big-ip_webaccelerator	f5 big-ip webaccelerator	eq	11.0.0
f5:big-ip_webaccelerator	f5 big-ip webaccelerator	eq	11.1.0
f5:big-ip_webaccelerator	f5 big-ip webaccelerator	eq	11.2.1
f5:big-ip_global_traffic_manager	f5 big-ip global traffic manager	eq	11.0.0
f5:big-ip_global_traffic_manager	f5 big-ip global traffic manager	eq	11.2.0
f5:big-ip_global_traffic_manager	f5 big-ip global traffic manager	eq	11.1.0
f5:big-ip_global_traffic_manager	f5 big-ip global traffic manager	eq	11.2.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.0.0
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	eq	11.2.1