K63163637: BIG-IP TMUI vulnerability CVE-2021-23043

Security Advisory Description A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to access arbitrary files. CVE-2021-23043 Impact An authenticated attacker may exploit this vulnerability by sending a crafted request to the...

F5 Networks BIG-IP : BIG-IP TMUI vulnerability (K63163637)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2. It is, therefore, affected by a vulnerability as referenced in the K63163637 advisory. - On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability...

CVE-2021-23043

CVE-2021-23043 affects BIG-IP TMUI: directory traversal in an undisclosed Configuration utility page allows access to arbitrary files. Exploitation is possible if/where TMUI is exposed. Fixed in different maintenance branches: 16.1.2 (BIG-IP 16.x), 15.1.4.1, 14.1.4.5, 13.1.5, 12.1.6, and 11.6.5.3...