漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.1.0-2.3.0, or Enterprise Manager 3.1.1 is licensed for Appliance Mode, Admin and Resource administrator roles can by-pass BIG-IP Appliance Mode restrictions to overwrite critical system files. Attackers of high privilege level are able to overwrite critical system files which bypasses security controls in place to limit TMSH commands. This is possible with an administrator or resource administrator roles when granted TMSH. Resource administrator roles must have TMSH access in order to perform this attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款F5产品安全漏洞
Vulnerability Description
F5 BIG-IP等都是美国F5公司的产品。F5 BIG-IP是一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的多合一网络设备。BIG-IQ Centralized Management是一套基于软件的云管理解决方案。 多款F5产品中存在安全漏洞。攻击者可借助TMSH访问权限利用该漏洞绕过BIG-IP Appliance Mode限制,覆盖重要的文件资源。以下产品和版本受到影响:F5 BIG-IP 14.0.0版本至14.0.0.2版本,13.0.0版本至13.1.0.5版本,12.1.0版本至
CVSS Information
N/A
Vulnerability Type
N/A