Lucene search
F5F5:K54358225HistoryDec 19, 2017 - 12:00 a.m.
K54358225 : BIG-IP APM Portal Access vulnerability CVE-2017-0301
2017-12-1900:00:00
my.f5.com
12
Security Advisory Description
In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected. (CVE-2017-0301)
Impact
When BIG-IP APM is licensed and provisioned, this vulnerability may allow access to internal BIG-IP APM resources. The application resources and backend servers are unaffected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.5.5 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 |
Related
nessus
nessus
F5 Networks BIG-IP : BIG-IP APM Portal Access vulnerability (K54358225)
2018-11-02 00:00:00
prion
prion
Code injection
2017-12-21 17:29:00
nvd
nvd
CVE-2017-0301
2017-12-21 17:29:00
cvelist
cvelist
CVE-2017-0301
2017-12-20 00:00:00
cve
cve
CVE-2017-0301
2017-12-21 17:29:00