CVE-2021-23026

BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vulnerable to cross-site request forgery CSRF attacks through iControl SOAP. Note: Software versions...

F5 Networks BIG-IP : iControl SOAP vulnerability (K53854428)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.2 / 15.1.3 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K53854428 advisory. BIG-IP and BIG-IQ arevulnerable to cross-site request forgery CSRF attacks through...

K53854428: iControl SOAP vulnerability CVE-2021-23026

Security Advisory Description BIG-IP and BIG-IQ are vulnerable to cross-site request forgery CSRF attacks through iControl SOAP. CVE-2021-23026 Impact An attacker may trick authenticated users into performing critical actions. This vulnerability can only be exploited through the control plane and...

CVE-2021-23026

creationtimestamp| type| source ---|---|--- 2021-09-15 02:21:18+00:00| seen| https://t.me/cibsecurity/28858...

CVE-2021-23026

Summary: CVE-2021-23026 affects F5 BIG-IP and BIG-IQ via a CSRF flaw in iControl SOAP that can trick authenticated users into performing actions on the control plane. The vulnerability affects multiple release lines (e.g., BIG-IP 16.0.x up to 16.0.1.2, 15.1.x up to 15.1.2, 14.1.x up to 14.1.4, 13...