PT-2021-15354
CVE-2021-23029
·
تاريخ النشر
2021-09-14
·
تاريخ التحديث
2021-09-27
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
F5 Advanced Web Application Firewall (WAF) versions 16.0.x through 16.0.1.2
Description
Insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through the F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configuration utility.
Recommendations
For versions 16.0.x through 16.0.1.2, update to version 16.0.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the BIG-IP ASM Configuration utility to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾