Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多款F5产品授权问题漏洞
Vulnerability Description
F5 BIG-IP AFM等都是美国F5公司的产品。F5 BIG-IP AFM是一款用于防护DDos攻击的高级防火墙产品。F5 BIG-IP Analytics是一套Web应用程序性能分析软件。F5 BIG-IP ASM是一款Web应用程序防火墙（WAF）， 多款F5产品中存在安全漏洞。攻击者可利用该漏洞执行代码。以下产品及版本受到影响：F5 BIG-IP LTM 14.1.0版本，14.0.0版本，13.0.0版本至13.1.2版本， 12.1.3版本至12.1.4版本；BIG-IP AAM 14.1.
CVSS Information
N/A
Vulnerability Type
N/A