Description


In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Related CPE's


a

f5

big-ip_access_policy_manager

2

Weaknesses



CWE-22

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6.8 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-08-04T16:15:09.630Z

3 years ago

Last modified

2024-11-21T06:04:31.587Z

1 year ago