PT-2013-5897 · F5 · F5 Big-Ip Apm

Publicado 2013-10-01 · Atualizado 2013-10-31 · CVE-2013-5975

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.1.0 through 11.2.1

Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors on the access policy logon page, specifically affecting the logon.inc file.

Recommendations For versions 11.1.0 through 11.2.1, consider implementing additional security measures to prevent clickjacking attacks, such as using framebusting techniques or restricting access to the logon.inc page until a fix is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5975

Produtos afetados

F5 Big-Ip Apm

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-5975 · Nota de Segurança
• http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14700.html · Aviso do Fabricante
• http://secunia.com/advisories/54844 · Aviso do Fabricante
• http://securitytracker.com/id/1029079 · Nota