Lucene search

K
cveMitreCVE-2014-8727
HistoryNov 17, 2014 - 4:59 p.m.

CVE-2014-8727

2014-11-1716:59:07
CWE-22
mitre
web.nvd.nist.gov
41
f5 big-ip
cve-2014-8727
directory traversal
vulnerability
nvd
tmui
control
jspmap
system
archive
properties
jsp
form

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

26.8%

Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the “Resource Administrator” or “Administrator” role to enumerate and delete arbitrary files via a … (dot dot) in the name parameter to (1) tmui/Control/jspmap/tmui/system/archive/properties.jsp or (2) tmui/Control/form.

Affected configurations

Nvd
Node
f5big-ip_local_traffic_managerRange10.2.1
VendorProductVersionCPE
f5big-ip_local_traffic_manager*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

26.8%