PT-2021-15311
CVE-2021-22978
·
تاريخ النشر
2021-02-12
·
تاريخ التحديث
2021-02-24
الوصف من
CVSS 3.1
8.3
عاليةالمقاييسAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
BIG-IP versions 16.0.x through 16.0.0
BIG-IP versions 15.1.x through 15.1.0
BIG-IP versions 14.1.x through 14.1.3
BIG-IP versions 13.1.x through 13.1.3.4
BIG-IP versions 12.1.x and earlier
BIG-IP versions 11.6.x and earlier
Description
The issue allows for a reflected XSS attack through undisclosed endpoints in iControl REST, potentially leading to a complete compromise of BIG-IP if the victim user has the admin role.
Recommendations
For BIG-IP versions 16.0.x, update to version 16.0.1 or later.
For BIG-IP versions 15.1.x, update to version 15.1.1 or later.
For BIG-IP versions 14.1.x, update to version 14.1.3.1 or later.
For BIG-IP versions 13.1.x, update to version 13.1.3.5 or later.
For BIG-IP versions 12.1.x and 11.6.x, consider upgrading to a supported version, as these versions have reached End of Software Development (EoSD).
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾