CVE-2014-3220

F5 BIG-IQ Cloud and Security 4.0.0–4.1.0 are vulnerable to CVE-2014-3220 via an authenticated user changing passwords of arbitrary users in mgmt/shared/authz/users/ due to a flaw in configuration utility access control. The advisory notes that an authenticated user with limited access could gain ...