Lucene search

K
f5F5F5:K14317
HistoryMar 28, 2013 - 7:51 a.m.

OpenSSH J-PAKE vulnerability CVE-2010-4478

2013-03-2807:51:00
support.f5.com
160

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.3%

F5 Product Development has evaluated the currently-supported releases for potential vulnerability. To find out whether F5 has determined that your release is vulnerable, and to obtain information about releases or hotfixes that resolve the vulnerability, refer to the following table:

Product Versions known to be vulnerable Versions known to be not vulnerable Vulnerable component or feature
BIG-IP LTM None
11.x
10.x
9.x
None

BIG-IP AAM | None | 11.x | None
BIG-IP AFM | None | 11.x | None
BIG-IP Analytics | None | 11.x
| None
BIG-IP APM | None | 11.x
10.x
| None
BIG-IP ASM | None | 11.x
10.x
9.x
| None
BIG-IP Edge Gateway
| None | 11.x
10.x
| None
BIG-IP GTM | None | 11.x
10.x
9.x
| None
BIG-IP Link Controller | None
| 11.x
10.x
9.x
| None
BIG-IP PEM | None
| 11.x
| None
BIG-IP PSM | None | 11.x
10.x
9.x
| None
BIG-IP WebAccelerator | None | 11.x
10.x
9.x
| None
BIG-IP WOM | None | 11.x
10.x
| None
ARX | None | 6.x
5.x
| None
Enterprise Manager | None | 3.x
2.x
1.x
| None
FirePass | None | 7.x
6.x
| None

None

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

88.3%