PT-2021-15342

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0.8 through 13.1.3.6 F5 BIG-IP versions 14.1.x before 14.1.4.2 F5 BIG-IP versions 15.1.x before 15.1.3 F5 BIG-IP versions 16.0.x Description The issue allows an authenticated user with the 'Administrator' role to bypass...

PT-2021-15338

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.x before 11.6.5.3 F5 BIG-IP versions 12.1.x before 12.1.6 F5 BIG-IP versions 13.1.x before 13.1.4 F5 BIG-IP versions 14.1.x before 14.1.4 F5 BIG-IP versions 15.1.x before 15.1.3 F5 BIG-IP versions 16.0.x before 16.0.1.1...

CVE-2021-23010: Undefined Security Weakness

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and 12.1.x before 12.1.5.3, when the BIG-IP ASM/Advanced WAF system processes WebSocket requests with JSON payloads using the default JSON Content Profile in the ASM Security Policy, the BIG-...

CVE-2021-23011: Uncontrolled Resource Consumption

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

CVE-2021-23013: Undefined Security Weakness

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel TMM may stop responding when processing Stream Control Transmission Protocol SCTP traffic under certain conditions. This...

CVE-2021-23008: Improper Authentication

On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD Active Directory authentication can be bypassed via a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC...

macOS 11.x < 11.3.1 Multiple Vulnerabilities (HT212335)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.3.1 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - An integer overflow was addressed with improved input validation CVE-2021-30663. - A memory corruption issue was address...

Apple tvOS 缓冲区错误漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system. A buffer error vulnerability exists in multiple...

PT-2021-4451

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 7.4.1 iOS versions prior to 14.5.1 iPadOS versions prior to 14.5.1 tvOS versions prior to 14.6 iOS versions prior to 12.5.3 macOS Big Sur versions prior to 11.3.1 Description A memory corruption issue was addressed wi...

About the security content of macOS Big Sur 11.3.1

About the security content of macOS Big Sur 11.3.1 This document describes the security content of macOS Big Sur 11.3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

F5 BIG-IP Licensing Issue Vulnerability (CNVD-2022-26845)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing, etc. An authorization issue vulnerability exists in BIG-IP Advanced WAF, which is caused by improper internal authorization. A remote attacker cou...

PT-2021-15335

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 11.6.6, 12.1.6, 13.1.4, 14.1.4, and 15.1.3 F5 BIG-IP versions 16.0.x Description The issue allows BIG-IP APM AD authentication to be bypassed via a spoofed AS-REP response sent over a hijacked KDC connection or from...

City fined for tracking its citizens via their phones

The Dutch information watchdog—the Autoriteit Persoonsgegevens AP—has fined the city of Enschede for € 600,000 for tracking its citizens movements without permission. It is the first time that a Dutch government body has been fined by the AP. The investigation was set in motion after it received ...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM REST API vulnerability (K23203045)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4 / 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K23203045 advisory. - On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP...

F5 Networks BIG-IP : TMM with HTTP/2 vulnerability ( (K90603426)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K90603426 advisory. - On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an...

F5 BIG-IP 命令注入漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A command injection vulnerability exists in BIG-IP, which stems from insufficient validation of user-supplied input. The following products an...

F5 BIG-IP 代码注入漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A code injection vulnerability exists in BIG-IP, which is caused by improper resource management within TMM. The following...

F5 BIG-IP 资源管理错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A resource management error vulnerability exists in BIG-IP, which arises from an application not properly controlling the...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in BIG-IP that originates from an infinite loop. The following products and versions are affected: BIG-IP:...

F5 BIG-IP 访问控制错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. An Access Control Error vulnerability exists in BIG-IP, which stems from improper access restriction. The following products and versions are...