Code injection

2019-12-2317:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.6%

JSON

On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained systems in which the security policy is configured with response-side features, such as Data Guard or response-side learning.

CPENameOperatorVersion
big-ip_application_security_managerge12.1.0
big-ip_application_security_managerle12.1.5
big-ip_application_security_managerge11.5.2
big-ip_application_security_managerle11.6.5
big-ip_application_security_managerge13.1.0
big-ip_application_security_managerlt13.1.3.2
big-ip_application_security_managerge14.1.0
big-ip_application_security_managerlt14.1.2.3
big-ip_application_security_managerge15.0.0
big-ip_application_security_managerlt15.1.0

Name	Operator	Version
big-ip_application_security_manager	ge	12.1.0
big-ip_application_security_manager	le	12.1.5
big-ip_application_security_manager	ge	11.5.2
big-ip_application_security_manager	le	11.6.5
big-ip_application_security_manager	ge	13.1.0
big-ip_application_security_manager	lt	13.1.3.2
big-ip_application_security_manager	ge	14.1.0
big-ip_application_security_manager	lt	14.1.2.3
big-ip_application_security_manager	ge	15.0.0
big-ip_application_security_manager	lt	15.1.0

References

support.f5.com/csp/article/K40452417