PT-2025-42325

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.5.1.3 F5 BIG-IP versions prior to 17.1.3 F5 BIG-IP versions prior to 16.1.6.1 F5 BIG-IP versions prior to 15.1.10.8 Description An unauthenticated Remote Code Execution RCE exists in the F5 BIG-IP Access Policy...

Access-Policy Code Execution Vulnerability

access-policy is an access policy encoder/parser. A security vulnerability exists in access-policy 3.1.0 and earlier versions, which originates when user input provided to the 'template' function is executed by the 'eval' function. An attacker could exploit this vulnerability to execute code...