CVE-2016-7467

Опубликовано: 11 апр. 2017

Источник: nvd

CVSS3: 5.3

CVSS2: 3.5

EPSS Низкий

Описание

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector.

Ссылки

http://www.securityfocus.com/bid/97168
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038131
https://support.f5.com/csp/article/K95444512
Vendor Advisory
http://www.securityfocus.com/bid/97168
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038131
https://support.f5.com/csp/article/K95444512
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01577

Низкий

5.3 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-gxpj-cpjp-q8f2