Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7vpr-695p-h2h2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing the user read access to the filesystem.

On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing the user read access to the filesystem.

EPSS

Процентиль: 50%
0.00274
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.9
nvd
около 5 лет назад

On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing the user read access to the filesystem.

EPSS

Процентиль: 50%
0.00274
Низкий

Дефекты

CWE-20