PT-2013-5897 · F5 · F5 Big-Ip Apm

Published 2013-10-01 · Updated 2013-10-31 · CVE-2013-5975

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.1.0 through 11.2.1

Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors on the access policy logon page, specifically affecting the logon.inc file.

Recommendations For versions 11.1.0 through 11.2.1, consider implementing additional security measures to prevent clickjacking attacks, such as using framebusting techniques or restricting access to the logon.inc page until a fix is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-5975

Affected Products

F5 Big-Ip Apm

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-5975 · Security Note
• http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14700.html · Vendor Advisory
• http://secunia.com/advisories/54844 · Vendor Advisory
• http://securitytracker.com/id/1029079 · Note