Lucene search

[email protected]CVE-2013-0150

HistoryAug 09, 2013 - 8:56 p.m.

CVE-2013-0150

2013-08-0920:56:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2013-0150

directory traversal

f5 big-ip apm

firepass

remote file upload

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

60.6%

JSON

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products “when APM is provisioned,” allows remote attackers to upload and execute arbitrary files via a … (dot dot) in the filename parameter.

CPENameOperatorVersion
f5:big-ip_advanced_firewall_managerf5 big-ip advanced firewall managereq11.3.0
f5:big-ip_policy_enforcement_managerf5 big-ip policy enforcement managereq11.3.0
f5:firepassf5 firepasseq7.0.0
f5:big-ip_access_policy_managerf5 big-ip access policy managerle10.2.4
f5:big-ip_edge_gatewayf5 big-ip edge gatewayle10.2.4
f5:big-ip_edge_gatewayf5 big-ip edge gatewayle11.3.0
f5:big-ip_webacceleratorf5 big-ip webacceleratorle11.3.0
f5:big-ip_wan_optimization_managerf5 big-ip wan optimization managerle11.3.0
f5:firepassf5 firepassle6.1.0
f5:big-ip_link_controllerf5 big-ip link controllerle11.3.0

CPE	Name	Operator	Version
f5:big-ip_advanced_firewall_manager	f5 big-ip advanced firewall manager	eq	11.3.0
f5:big-ip_policy_enforcement_manager	f5 big-ip policy enforcement manager	eq	11.3.0
f5:firepass	f5 firepass	eq	7.0.0
f5:big-ip_access_policy_manager	f5 big-ip access policy manager	le	10.2.4
f5:big-ip_edge_gateway	f5 big-ip edge gateway	le	10.2.4
f5:big-ip_edge_gateway	f5 big-ip edge gateway	le	11.3.0
f5:big-ip_webaccelerator	f5 big-ip webaccelerator	le	11.3.0
f5:big-ip_wan_optimization_manager	f5 big-ip wan optimization manager	le	11.3.0
f5:firepass	f5 firepass	le	6.1.0
f5:big-ip_link_controller	f5 big-ip link controller	le	11.3.0

Rows per page:

1-10 of 231

References

secunia.com/advisories/53477

support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.html

nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

60.6%

JSON

Related for CVE-2013-0150

prion1 f52 nessus1 cvelist1