Design/Logic Flaw

2019-07-0319:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

On BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iControl REST processes to crash. The attack can only come from an authenticated user; all roles are capable of performing the attack. Unauthenticated users cannot perform this attack.

CPENameOperatorVersion
big-ip_access_policy_managerge12.1.2
big-ip_access_policy_managerle12.1.4
big-ip_advanced_firewall_managerge12.1.2
big-ip_advanced_firewall_managerle12.1.4
big-ip_analyticsge12.1.2
big-ip_analyticsle12.1.4
big-ip_application_acceleration_managerge12.1.2
big-ip_application_acceleration_managerle12.1.4
big-ip_application_security_managerge12.1.2
big-ip_application_security_managerle12.1.4

Name	Operator	Version
big-ip_access_policy_manager	ge	12.1.2
big-ip_access_policy_manager	le	12.1.4
big-ip_advanced_firewall_manager	ge	12.1.2
big-ip_advanced_firewall_manager	le	12.1.4
big-ip_analytics	ge	12.1.2
big-ip_analytics	le	12.1.4
big-ip_application_acceleration_manager	ge	12.1.2
big-ip_application_acceleration_manager	le	12.1.4
big-ip_application_security_manager	ge	12.1.2
big-ip_application_security_manager	le	12.1.4