Non notée
CVE-2021-23029 On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to…
Description
On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIG-IP Advanced WAF and BIG-IP ASM | Versions non publiées |
Références
- support.f5.com support.f5.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIG-IP Advanced WAF and BIG-IP ASM
Les 10 CVE de BIG-IP Advanced WAF and BIG-IP ASM →
CVE-2021-23028
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON…
Non notée
CVE-2021-23030
On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3,…
Non notée
CVE-2021-23031
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before…
Non notée
CVE-2021-23036
On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server,…
Non notée