Command injection

2022-10-1922:15:00

PRIOn knowledge base

www.prio-n.com

big-ip

command injection

http::collect

virtual server

tmm

0.001 Low

EPSS

Percentile

38.6%

JSON

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.

CPENameOperatorVersion
big-ip_access_policy_managerge13.1.0
big-ip_access_policy_managerle13.1.5
big-ip_advanced_firewall_managerge13.1.0
big-ip_advanced_firewall_managerle13.1.5
big-ip_analyticsge13.1.0
big-ip_analyticsle13.1.5
big-ip_application_acceleration_managerge13.1.0
big-ip_application_acceleration_managerle13.1.5
big-ip_application_security_managerge13.1.0
big-ip_application_security_managerle13.1.5

Name	Operator	Version
big-ip_access_policy_manager	ge	13.1.0
big-ip_access_policy_manager	le	13.1.5
big-ip_advanced_firewall_manager	ge	13.1.0
big-ip_advanced_firewall_manager	le	13.1.5
big-ip_analytics	ge	13.1.0
big-ip_analytics	le	13.1.5
big-ip_application_acceleration_manager	ge	13.1.0
big-ip_application_acceleration_manager	le	13.1.5
big-ip_application_security_manager	ge	13.1.0
big-ip_application_security_manager	le	13.1.5

Rows per page:

1-10 of 221

References

support.f5.com/csp/article/K69940053

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for PRION:CVE-2022-41833