F5 Networks BIG-IP : TMM vulnerability (K21971977)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.3.1 / 15.1.2.1 / 16.0.1.1. It is, therefore, affected by a vulnerability as referenced in the K21971977 advisory. - On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under...

F5 Networks BIG-IP : iControl REST vulnerability (K68652018)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.6 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K68652018 advisory. An authenticated attacker with access to iControl REST over the control plane may be...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K76518456)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.5 / 14.1.3.1 / 15.1.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K76518456 advisory. - On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5...

F5 Networks BIG-IP : iControl REST vulnerability (K87502622)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.5 / 14.1.3.1 / 15.1.1 / 16.0.1. It is, therefore, affected by a vulnerability as referenced in the K87502622 advisory. - On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-...

Sudo set_cmd() is vulnerable to heap-based buffer overflow

Overview A heap-based overflow has been discovered in the setcmd function in sudo, which may allow a local attacker to execute commands with elevated administrator privileges. Description From the Sudo Main Page: Sudo su "do" allows a system administrator to delegate authority to give certain use...

nginx Detection Consolidation

Consolidation of Nginx detections. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113787";...

IBM HTTP Server 8.5.0.0 <= 8.5.5.4 / 8.0.0.0 <= 8.0.0.10 / 7.0.0.0 <= 7.0.0.35 / 6.1.0.0 <= 6.1.0.47 / 6.0.0.0 <= 6.0.2.43 (521711)

The version of IBM HTTP Server running on the remote host is affected by a vulnerability. The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway,...

F5 BIG-IP APM Denial of Service Vulnerability (CNVD-2021-04826)

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM, which can be exploited by an attacker who can trigger a fatal error to trigger a denial via...

CVE-2020-27722

In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption...

CVE-2020-27727

On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing the user read access to the filesystem...

F5 BIG-IP ASM Denial of Service Vulnerability (CNVD-2020-74859)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in the F5 BIG-IP ASM product, which can be exploited by an attacker who can trigger a...

F5 BIG-IP Information Disclosure Vulnerability (CNVD-2020-74865)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An information disclosure vulnerability exists in F5 BIG-IP, which can be exploited by an attacker who can read files via F5...

F5 Networks BIG-IP : Linux kernel vulnerability (K48073202)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.6 / 14.1.3.1 / 15.1.3. It is, therefore, affected by a vulnerability as referenced in the K48073202 advisory. An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before...

F5 BIG-IP APM 输入验证错误漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. An input validation error vulnerability exists in F5 BIG-IP APM, which can be exploited by an attacker to spoof a user and redirect them to a...

F5 BIG-IP ASM 资源管理错误漏洞

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A denial of service vulnerability exists in F5 BIG-IP ASM, which can be exploited by an attacker t...

F5 BIG-IP Security Vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A security vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to create a memory leak that can be...

F5 BIG-IP AFM Security Vulnerability

F5 BIG-IP AFM is an advanced firewall product from F5 USA for protection against DDos attacks. A security vulnerability exists in F5 BIG-IP AFM, which can be exploited by an attacker to trigger a denial of service via a fatal error triggered by a protocol inspection profile. The following product...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K60344652)

On the BIG-IP AFM, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes non-TCP traffic. CVE-2020-27714 Impact The affected BIG-IP system may...

F5 Networks BIG-IP : BIG-IP APM network access VPN vulnerability (K04518313)

In BIG-IP APM, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially crafted malicious traffic over the tunnel.CVE-2020-27724 Impact This vulnerabilitymay cause the Traffic Management Microkernel TMM to stop responding, leading...