Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7qm-xv29-cxj4

Опубликовано: 10 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

EPSS

Процентиль: 18%
0.00056
Низкий

8.7 High

CVSS3

Дефекты

CWE-267

Связанные уязвимости

CVSS3: 8.7
nvd
больше 2 лет назад

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS3: 8.7
fstec
больше 2 лет назад

Уязвимость средства контроля доступа и удаленной аутентификации BIG-IP Access Policy Manager, а также программных средств, BIG-IP Advanced Firewall Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System, BIG-IP Local Traffic Manager, связанная с небезопасным управлением привилегиями, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации

EPSS

Процентиль: 18%
0.00056
Низкий

8.7 High

CVSS3

Дефекты

CWE-267