Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款F5产品权限许可和访问控制问题漏洞
Vulnerability Description
F5 BIG-IP APM等都是美国F5公司的产品。F5 BIG-IP APM是一套访问和安全解决方案。F5 BIG-IP是一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。F5 BIG-IP Edge Gateway是一套远程接入解决方案。 多款F5产品中存在安全漏洞。攻击者可利用该漏洞绕过Advanced Shell直接访问保护。以下产品及版本受到影响：F5 BIG-IP LTM；BIG-IP AAM；BIG-IP AFM；BIG-IP Analytics；BIG-IP APM；
CVSS Information
N/A
Vulnerability Type
N/A