Описание
When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured with App Protect Bot Defense, undisclosed requests can disrupt new client requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 17.1.0 (включая) до 17.1.2 (исключая)Версия от 17.1.0 (включая) до 17.1.2 (исключая)
Одно из
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.0011
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 5.3
github
4 месяца назад
When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured with App Protect Bot Defense, undisclosed requests can disrupt new client requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
EPSS
Процентиль: 30%
0.0011
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-770