CVE-2015-4040
Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.
- Score
- CVSS 2.0 4.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2015-09-17
- Last modified
- 2024-08-06
- Weaknesses
- CWE-22
Affected products
- Big-ip Access Policy Manager (F5)
- Big-ip Advanced Firewall Manager (F5)
- Big-ip Analytics (F5)
- Big-ip Application Acceleration Manager (F5)
- Big-ip Application Security Manager (F5)
- Big-ip Edge Gateway (F5)
- Big-ip Global Traffic Manager (F5)
- Big-ip Link Controller (F5)
- Big-ip Local Traffic Manager (F5)
- Big-ip Policy Enforcement Manager (F5)
- Big-ip Protocol Security Module (F5)
- Big-ip Wan Optimization Manager (F5)
- Big-ip Webaccelerator (F5)
- Enterprise Manager (F5)
References
- http://packetstormsecurity.com/files/133931/F5-BigIP-10.2.4-Build-595.0-HF3-Path-Traversal.html
- http://www.securitytracker.com/id/1033532
- http://www.securitytracker.com/id/1033533
- https://support.f5.com/kb/en-us/solutions/public/17000/200/sol17253.html
