Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款F5产品iControl REST 安全漏洞
Vulnerability Description
F5 BIG-IP LTM等都是美国F5公司的产品。F5 BIG-IP LTM是一款本地流量管理器；BIG-IP AAM是一款应用程序加速管理器。iControl REST是其中的一个状态显示传输接口。 多款F5产品中的iControl REST存在安全漏洞，该漏洞源于程序在将cookies转换成令牌时，没有重新正确的验证cookies。攻击者可利用该漏洞获取有效的iControl REST身份验证令牌，并获取BIG-IP系统的iControl REST界面访问权限。以下产品和版本受到影响：F5 BIG-
CVSS Information
N/A
Vulnerability Type
N/A