Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Information
N/A
Vulnerability Type
源验证错误
Vulnerability Title
F5 BIG-IP APM 访问控制错误漏洞
Vulnerability Description
F5 BIG-IP APM是美国F5公司的一套访问和安全解决方案。该产品提供统一访问关键业务应用和网络的功能。 F5 BIG-IP APM 存在访问控制错误漏洞，该漏洞源于在 BIG-IP APM 系统的网络访问资源中配置代理设置时，在 Mac 和 Windows 上连接 BIG-IP Edge Client 很容易受到 DNS 重新绑定攻击。DNS 重新绑定允许外部攻击者绕过同源策略。未经身份验证的远程攻击者可以利用此漏洞窃取代理配置详细信息，包括子域信息和内部 IP 地址。
CVSS Information
N/A
Vulnerability Type
N/A