PT-2016-3752 · F5 · F5 Big-Ip Webaccelerator+16

Publicado

2016-01-12

·

Atualizado

2016-01-14

·

CVE-2015-7393

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP Analytics versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP APM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP ASM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP Link Controller versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP AAM versions 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP AFM versions 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP PEM versions 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP DNS version 12.0.0 before 12.0.0 HF1 F5 BIG-IP Edge Gateway versions 11.2.0 through 11.3.0 F5 BIG-IP WebAccelerator versions 11.2.0 through 11.3.0 F5 BIG-IP WOM versions 11.2.0 through 11.3.0 F5 BIG-IP GTM versions 11.2.0 through 11.6.0 F5 BIG-IP PSM versions 11.2.0 through 11.4.1 F5 Enterprise Manager versions 3.0.0 through 3.1.1 F5 BIG-IQ Cloud versions 4.0.0 through 4.5.0 F5 BIG-IQ Device versions 4.2.0 through 4.5.0 F5 BIG-IQ Security versions 4.0.0 through 4.5.0 F5 BIG-IQ ADC version 4.5.0 F5 BIG-IQ Centralized Management version 4.6.0 F5 BIG-IQ Cloud and Orchestration version 1.0.0
Description The issue allows local users with advanced shell (bash) access to gain privileges via unspecified vectors.
Recommendations For F5 BIG-IP LTM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP Analytics versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP APM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP ASM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP Link Controller versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP AAM versions 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP AFM versions 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP PEM versions 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP DNS version 12.0.0 before 12.0.0 HF1, update to a version that includes the fix. For F5 BIG-IP Edge Gateway versions 11.2.0 through 11.3.0, update to a version that includes the fix. For F5 BIG-IP WebAccelerator versions 11.2.0 through 11.3.0, update to a version that includes the fix. For F5 BIG-IP WOM versions 11.2.0 through 11.3.0, update to a version that includes the fix. For F5 BIG-IP GTM versions 11.2.0 through 11.6.0, update to a version that includes the fix. For F5 BIG-IP PSM versions 11.2.0 through 11.4.1, update to a version that includes the fix. For F5 Enterprise Manager versions 3.0.0 through 3.1.1, update to a version that includes the fix. For F5 BIG-IQ Cloud versions 4.0.0 through 4.5.0, update to a version that includes the fix. For F5 BIG-IQ Device versions 4.2.0 through 4.5.0, update to a version that includes the fix. For F5 BIG-IQ Security versions 4.0.0 through 4.5.0, update to a version that includes the fix. For F5 BIG-IQ ADC version 4.5.0, update to a version that includes the fix. For F5 BIG-IQ Centralized Management version 4.6.0, update to a version that includes the fix. For F5 BIG-IQ Cloud and Orchestration version 1.0.0, update to a version that includes the fix.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2015-7393

Produtos afetados

F5 Big-Ip Apm
F5 Big-Ip Analytics
F5 Big-Ip Dns
F5 Big-Ip Edge Gateway
F5 Big-Ip Gtm
F5 Big-Ip Ltm
F5 Big-Ip Link Controller
F5 Big-Ip Pem
F5 Big-Ip Wom
F5 Big-Ip Webaccelerator
F5 Big-Iq Adc
F5 Big-Iq Centralized Management
F5 Big-Iq Cloud
F5 Big-Iq Cloud/Orchestration
F5 Big-Iq Device
F5 Big-Iq Security
F5 Enterprise Manager