CVE-2021-22980

CVE-2021-22980 is an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows. Affected CTU versions: Edge Client 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5. The issue allows loading a malicious DLL from the utility...

BIG-IP security vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other features. A security vulnerability exists in the BIG-IP where collaboration between malicious HTTP client code and a malicious server cou...

F5 Networks BIG-IP : BIG-IP ASM WebSocket vulnerability (K88230177)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.6 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K88230177 advisory. - On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x...

F5 Networks BIG-IP : TMM vulnerability (K14693346)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.3.1 / 16.0.1.1. It is, therefore, affected by a vulnerability as referenced in the K14693346 advisory. - On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a...

BIG-IP security vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in BIG-IP that stems from the vulnerability of TLS connections that do not use EMS to man-in-the-middle attack...

F5 Networks BIG-IP : BIG-IP FPS XSS vulnerability (K63497634)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.5 / 14.1.2.8 / 15.1.1 / 16.0.1. It is, therefore, affected by a vulnerability as referenced in the K63497634 advisory. - On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2....

F5 Networks BIG-IP : iRules LX vulnerability (K13323323)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.5 / 14.1.3.1 / 15.1.2 / 16.0.1.1. It is, therefore, affected by a vulnerability as referenced in the K13323323 advisory. - On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before...

F5 Networks BIG-IP : BIG-IP SSL/TLS vulnerability (K09121542)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.0.0. It is, therefore, affected by a vulnerability as referenced in the K09121542 advisory. - On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation...

F5 Networks BIG-IP : BIG-IP APM CTU vulnerability (K29282483)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.6 / 14.1.4 / 15.1.3.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K29282483 advisory. - In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K32049501)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K32049501 advisory. - On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM...

F5 Networks BIG-IP : iControl REST vulnerability (K68652018)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.6 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K68652018 advisory. An authenticated attacker with access to iControl REST over the control plane may be...

F5 Networks BIG-IP : iControl REST vulnerability (K87502622)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.5 / 14.1.3.1 / 15.1.1 / 16.0.1. It is, therefore, affected by a vulnerability as referenced in the K87502622 advisory. - On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x...

F5 Networks BIG-IP : TMM vulnerability (K21971977)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.3.1 / 15.1.2.1 / 16.0.1.1. It is, therefore, affected by a vulnerability as referenced in the K21971977 advisory. - On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under...

F5 Networks BIG-IP : BIG-IP ASM Bot Defense open redirection vulnerability (K33440533)

When receiving a unauthenticated client request with a maliciously crafted URI, a BIG-IP Advanced WAF or ASM virtual server configured with a DoS profile with Proactive Bot Defense versions prior to 14.1.0, or a Bot Defense profile versions 14.1.0 and later, may subject clients and web servers to...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K76518456)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.5 / 14.1.3.1 / 15.1.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K76518456 advisory. - On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-...

Sudo set_cmd() is vulnerable to heap-based buffer overflow

Overview A heap-based overflow has been discovered in the setcmd function in sudo, which may allow a local attacker to execute commands with elevated administrator privileges. Description From the Sudo Main Page: Sudo su "do" allows a system administrator to delegate authority to give certain use...

nginx Detection Consolidation

Consolidation of Nginx detections. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113787";...

IBM HTTP Server 8.5.0.0 <= 8.5.5.4 / 8.0.0.0 <= 8.0.0.10 / 7.0.0.0 <= 7.0.0.35 / 6.1.0.0 <= 6.1.0.47 / 6.0.0.0 <= 6.0.2.43 (521711)

The version of IBM HTTP Server running on the remote host is affected by a vulnerability. The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway,...

F5 BIG-IP APM Denial of Service Vulnerability (CNVD-2021-04826)

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM, which can be exploited by an attacker who can trigger a fatal error to trigger a denial via...