Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
F5 BIG-IP APM/FirePass Java小应用程序目录遍历漏洞
Vulnerability Description
F5 BIG-IP Access Policy Manager（APM）和FirePass SSL VPN（FirePass）都是美国F5公司的产品。BIG-IP APM是一套提供安全统一访问关键业务应用和网络的解决方案。FirePass是一款可提供安全远程访问企业内部应用和数据的产品。 F5 BIG-IP APM和FirePass中的客户端组件中的未指定签名的Java小应用程序中存在目录遍历漏洞。当配置APM时，远程攻击者可通过文件名参数中的‘..’利用该漏洞上传并执行任意文件。以下产品及版本中存在漏洞
CVSS Information
N/A
Vulnerability Type
N/A