Unrestricted file upload

2018-12-2815:29:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

JSON

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system’s user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps.

CPENameOperatorVersion
big-ip_access_policy_managerge11.2.1
big-ip_access_policy_managerle11.6.3
big-ip_access_policy_managerge13.0.0
big-ip_access_policy_managerle13.1.1
big-ip_access_policy_managerge14.0.0
big-ip_access_policy_managerle14.1.0
big-ip_access_policy_managerge12.1.0
big-ip_access_policy_managerle12.1.4
big-ip_advanced_firewall_managerge11.2.1
big-ip_advanced_firewall_managerle11.6.3

Name	Operator	Version
big-ip_access_policy_manager	ge	11.2.1
big-ip_access_policy_manager	le	11.6.3
big-ip_access_policy_manager	ge	13.0.0
big-ip_access_policy_manager	le	13.1.1
big-ip_access_policy_manager	ge	14.0.0
big-ip_access_policy_manager	le	14.1.0
big-ip_access_policy_manager	ge	12.1.0
big-ip_access_policy_manager	le	12.1.4
big-ip_advanced_firewall_manager	ge	11.2.1
big-ip_advanced_firewall_manager	le	11.6.3