Описание
When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 17.1.0 (включая) до 17.1.1 (исключая)Версия от 17.1.0 (включая) до 17.1.1 (исключая)
Одно из
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00267
Низкий
7.5 High
CVSS3
Дефекты
CWE-772
CWE-772
Связанные уязвимости
CVSS3: 7.5
github
почти 2 года назад
When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
EPSS
Процентиль: 50%
0.00267
Низкий
7.5 High
CVSS3
Дефекты
CWE-772
CWE-772