Lucene search

Gabi StapelIMPERVABLOG:E3E4F00206255171C58A078ABECAC35E

HistoryOct 27, 2023 - 2:45 p.m.

Imperva Customers are Protected Against the Latest F5 BIG-IP Vulnerability

2023-10-2714:45:37

Gabi Stapel

www.imperva.com

imperva

big-ip

vulnerability

threat radar

protection

authentication bypass

request smuggling

cloud waf

waf gateway

threat research

emergency feed

security patches

monitoring

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.966 High

EPSS

Percentile

99.5%

JSON

Imperva is tracking the recent critical security vulnerability impacting F5’s BIG-IP solution. The vulnerability, CVE-2023-46747, could allow an attacker to bypass authentication and potentially compromise the system via request smuggling.

Imperva Threat Research has been actively monitoring this situation, and we are happy to inform that Imperva Cloud WAF and WAF Gateway customers with Threat Radar enabled are protected out of the box against this threat. Imperva WAF Gateway customers will need to enable the signature via the Emergency Feed.

Even with protection, we urge our customers to remain vigilant and ensure their systems are updated with the latest security patches. We will update this blog with more information as it becomes available.

The post Imperva Customers are Protected Against the Latest F5 BIG-IP Vulnerability appeared first on Blog.