F5 Networks BIG-IP : BIG-IP APM Appliance mode vulnerability (K34893234)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.4 / 16.1.1 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K34893234 advisory. - In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an...

K11542555: iApps vulnerability CVE-2020-17507

Security Advisory Description An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer over-read. CVE-2020-17507 Impact An unauthenticated remote attacker can trick an administrator into processing a large file wi...

CVE-2022-31473

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker...

Directory traversal

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker...

CVE-2022-31473

CVE-2022-31473 affects BIG-IP APM in Appliance mode. In 16.1.x before 16.1.1 and 15.1.x before 15.1.4, an authenticated attacker could bypass Appliance mode restrictions via a directory traversal vulnerability in an undisclosed iApps page, crossing a security boundary. The F5 advisory K34893234 s...

CVE-2022-31473

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker...

CVE-2020-27727

On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing the user read access to the filesystem...