Lucene search

K
f5F5SOL13993
HistoryNov 02, 2012 - 12:00 a.m.

SOL13993 - Cross-site URL redirection attack vulnerability CVE-2009-4017

2012-11-0200:00:00
support.f5.com
27

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.028 Low

EPSS

Percentile

89.6%

Vulnerability Recommended Actions

Upgrade FirePass to the latest hotfix.

Acknowledgements

F5 would like to acknowledge Aung Khant of YGN Ethical Hacker Group, Myanmar for bringing this issue to our attention, and for following the highest standards of responsible disclosure.

Supplemental Information

  • SOL9970: Subscribing to email notifications regarding F5 products
  • SOL9957: Creating a custom RSS feed to view new and updated documents
  • SOL4602: Overview of the F5 security vulnerability response policy
  • SOL167: Downloading software and firmware from F5
  • SOL10322: FirePass hotfix matrix
  • SOL3430: Installing FirePass hotfixes
CPENameOperatorVersion
firepassle7.0.0

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.028 Low

EPSS

Percentile

89.6%