Lucene search

K
f5F5F5:K15229
HistoryNov 04, 2014 - 12:00 a.m.

K15229 : BIG-IQ / BIG-IP privilege escalation vulnerability CVE-2014-3220

2014-11-0400:00:00
my.f5.com
9

6.5 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.2%

Security Advisory Description

F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user’s page in mgmt/shared/authz/users/. (CVE-2014-3220)

Impact

An authenticated user with limited access may be able to gain administrative access to the system.

6.5 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.2%