EUVD-2017-15217

Malware in sbrugna...

CVE-2022-29479: Improper Input Validation

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance...

CVE-2022-26340: Incorrect Permission Assignment for Critical Resource

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privileged attacke...

PT-2022-17797

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 16.1.2.2 F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6 F5 BIG-IP versions prior to 13.1.5 F5 BIG-IP versions 12.1.x and 11.6.x F5 BIG-IQ Centralized Management versions 8.x and 7.x...

PT-2021-3230

Name of the Vulnerable Software and Affected Versions F5 BIG-IQ Centralized Management versions 6.x and 7.x and versions 8.0.x before 8.0.0.1 Description The issue is related to insufficient validation of arguments passed to a command, allowing a remote attacker to execute arbitrary commands on t...

F5 BIG-IP and F5 BIG-IQ Centralized Management Information Disclosure Vulnerability

F5 BIG-IP and F5 BIG-IQ Centralized Management are both products of F5 Corporation in the U.S. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IQ Centralized Management is a suite of...

F5 BIG-IQ Centralized Management CVE-2019-6652 Security Bypass Vulnerability

Description F5 BIG-IQ Centralized Management is prone to a remote security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. Technologies Affected F5 BIG-IQ Centralized Management 6.0.1 F5 BIG-I...

PT-2018-12966

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.0.0 through 14.0.0.2 F5 BIG-IP versions 13.0.0 through 13.1.0.5 F5 BIG-IP versions 12.1.0 through 12.1.3.5 F5 BIG-IP versions 11.6.0 through 11.6.3.2 F5 BIG-IP versions 11.2.1 through 11.5.6 F5 BIG-IQ Centralized Manageme...

PT-2018-12967

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.0.0 through 14.0.0.2 F5 BIG-IP versions 13.0.0 through 13.1.0.7 F5 BIG-IP versions 12.1.0 through 12.1.3.5 F5 BIG-IP versions 11.6.0 through 11.6.3.2 F5 BIG-IP versions 11.2.1 through 11.5.6 F5 BIG-IQ Centralized Manageme...

CVE-2017-6152

A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password...

CVE-2017-6152: Improper Privilege Management

A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password...

PT-2018-8299

Name of the Vulnerable Software and Affected Versions F5 BIG-IQ Centralized Management versions 5.1.0 through 5.2.0 Description A local user with the Access Manager role has the ability to change the passwords of other users on the system, including the local admin account password. Recommendatio...