PT-2019-7832 · F5 · F5 Websafe Dashboard

Publicado 2019-07-01 · Atualizado 2019-07-02 · CVE-2016-5236

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions F5 WebSafe Dashboard versions 3.9.5 and earlier

Description The issue allows privileged authenticated users to inject arbitrary web script or HTML when creating a new user, account, or signature. This is a Cross-Site-Scripting (XSS) vulnerability.

Recommendations For F5 WebSafe Dashboard versions 3.9.5 and earlier, update to a version later than 3.9.5 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-5236

Produtos afetados

F5 Websafe Dashboard

Referências · 5

• https://t.me/malwr/1604 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2016-5236 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5236 · Aviso do Fabricante
• https://t.me/cibsecurity/5271 · Publicação no Telegram
• https://support.f5.com/csp/article/K55922302 · Aviso do Fabricante