PT-2017-2231 · F5 · F5 Big-Ip

Publicado 2017-05-23 · Atualizado 2017-07-08 · CVE-2017-6131

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.0.0 through 12.1.2 F5 BIG-IP versions 13.0.0

Description The issue arises due to insufficient protection of registration data, which could allow an attacker to remotely access the BIG-IP host via SSH. This affects various BIG-IP components, including Application Security Manager, Access Policy Manager, Link Controller, Policy Enforcement Manager, Local Traffic Manager, DNS, WebSafe, Advanced Firewall Manager, and Application Acceleration Manager. The impacted administrative account is the Azure instance administrative user created at deployment, while the root and admin accounts are not vulnerable.

Recommendations For F5 BIG-IP versions 12.0.0 through 12.1.2, consider changing the default administrative password to prevent unauthorized access. For F5 BIG-IP version 13.0.0, change the default administrative password to mitigate the risk of remote access via SSH. As a temporary workaround, restrict SSH access to the BIG-IP host until the default password is changed.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2017-01425

CVE-2017-6131

Produtos afetados

F5 Big-Ip

Referências · 5

• http://securitytracker.com/id/1038569 · Nota
• https://bdu.fstec.ru/vul/2017-01425 · Nota de Segurança
• https://support.f5.com/csp/article/K61757346 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6131 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6131 · Aviso do Fabricante