Cross site request forgery (csrf)

2018-05-0213:29:00

PRIOn knowledge base

www.prio-n.com

0.003 Low

EPSS

Percentile

69.7%

JSON

On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue.

CPENameOperatorVersion
big-ip_access_policy_managerge13.1.0
big-ip_access_policy_managerle13.1.0.5
big-ip_advanced_firewall_managerge13.1.0
big-ip_advanced_firewall_managerle13.1.0.5
big-ip_analyticsge13.1.0
big-ip_analyticsle13.1.0.5
big-ip_application_acceleration_managerge13.1.0
big-ip_application_acceleration_managerle13.1.0.5
big-ip_application_security_managerge13.1.0
big-ip_application_security_managerle13.1.0.5

Name	Operator	Version
big-ip_access_policy_manager	ge	13.1.0
big-ip_access_policy_manager	le	13.1.0.5
big-ip_advanced_firewall_manager	ge	13.1.0
big-ip_advanced_firewall_manager	le	13.1.0.5
big-ip_analytics	ge	13.1.0
big-ip_analytics	le	13.1.0.5
big-ip_application_acceleration_manager	ge	13.1.0
big-ip_application_acceleration_manager	le	13.1.0.5
big-ip_application_security_manager	ge	13.1.0
big-ip_application_security_manager	le	13.1.0.5