Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gfc8-6qcc-3mvm

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 7.2

Описание

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 17%
0.00053
Низкий

8.6 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 7.2
fstec
больше 1 года назад

Уязвимость утилиты конфигурации TMOS Shell (tmsh) компонента Monitors средства контроля доступа и удаленной аутентификации BIG-IP Access Policy Manager, а также программных средств, BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibility and Reporting (AVR), BIG-IP Camer-Grade NAT (CGNAT), BIG-IP DDos Hybrid Defender, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Inforcement Manager, BIG-IP SSL Orchestrator, BIG-IP Webaccelerator, BIG-IP WebSafe, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 17%
0.00053
Низкий

8.6 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-306