Added |
CVSS V3 |
|
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
|
Added |
CVSS V2 |
|
(AV:N/AC:H/Au:N/C:N/I:N/A:P)
|
Added |
CWE |
|
CWE-20
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.2
*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* versions from (including) 10.1.0 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* versions from (including) 11.6.0 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Added |
CPE Configuration |
|
OR
*cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:* versions from (including) 11.2.1 up to (including) 11.5.6
*cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:* versions from (including) 11.6.1 up to (including) 11.6.3.1
*cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:* versions from (including) 12.1.0 up to (including) 12.1.3.5
*cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:* versions from (including) 13.0.0 up to (including) 13.1.0.5
|
Changed |
Reference Type |
https://support.f5.com/csp/article/K94105051 No Types Assigned
|
https://support.f5.com/csp/article/K94105051 Vendor Advisory
|
Added |
CVSS V2 Metadata |
|
Victim must voluntarily interact with attack mechanism
|