PT-2014-5680 · F5 · F5 Big-Ip Gtm+9

Published 2014-10-28 · Updated 2015-08-28 · CVE-2014-4023

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 10.1.0 through 10.2.4 F5 BIG-IP LTM versions 11.0.0 through 11.5.x F5 BIG-IP APM versions 10.1.0 through 10.2.4 F5 BIG-IP APM versions 11.0.0 through 11.5.x F5 BIG-IP ASM versions 10.1.0 through 10.2.4 F5 BIG-IP ASM versions 11.0.0 through 11.5.x F5 BIG-IP GTM versions 10.1.0 through 10.2.4 F5 BIG-IP GTM versions 11.0.0 through 11.5.x F5 BIG-IP Link Controller versions 10.1.0 through 10.2.4 F5 BIG-IP Link Controller versions 11.0.0 through 11.5.x F5 BIG-IP AAM versions 11.0.0 through 11.5.x F5 BIG-IP AFM versions 11.0.0 through 11.5.x F5 BIG-IP PEM versions 11.0.0 through 11.5.x F5 BIG-IP Analytics versions 11.0.0 through 11.5.1 F5 BIG-IP Edge Gateway versions 10.1.0 through 10.2.4 F5 BIG-IP Edge Gateway versions 11.0.0 through 11.3.0 F5 BIG-IP WebAccelerator versions 10.1.0 through 10.2.4 F5 BIG-IP WebAccelerator versions 11.0.0 through 11.3.0 F5 BIG-IP WOM versions 10.1.0 through 10.2.4 F5 BIG-IP WOM versions 11.0.0 through 11.3.0 F5 BIG-IP PSM versions 10.1.0 through 10.2.4 F5 BIG-IP PSM versions 11.0.0 through 11.4.1 F5 Enterprise Manager versions 2.1.0 through 2.3.0 F5 Enterprise Manager versions 3.0.0 through 3.1.1

Description A cross-site scripting (XSS) issue exists in the Configuration utility, specifically in tmui/dashboard/echo.jsp, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For F5 BIG-IP LTM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP APM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP ASM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP GTM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP Link Controller versions 10.1.0 through 10.2.4 and 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP AAM versions 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP AFM versions 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP PEM versions 11.0.0 through 11.5.x, update to a version outside of the affected range. For F5 BIG-IP Analytics versions 11.0.0 through 11.5.1, update to a version outside of the affected range. For F5 BIG-IP Edge Gateway versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 BIG-IP WebAccelerator versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 BIG-IP WOM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, update to a version outside of the affected range. For F5 BIG-IP PSM versions 10.1.0 through 10.2.4 and 11.0.0 through 11.4.1, update to a version outside of the affected range. For F5 Enterprise Manager versions 2.1.0 through 2.3.0 and 3.0.0 through 3.1.1, update to a version outside of the affected range.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-4023

Affected Products

F5 Big-Ip Apm

F5 Big-Ip Analytics

F5 Big-Ip Edge Gateway

F5 Big-Ip Gtm

F5 Big-Ip Ltm

F5 Big-Ip Link Controller

F5 Big-Ip Pem

F5 Big-Ip Wom

F5 Big-Ip Webaccelerator

F5 Enterprise Manager

References · 4

• 🔥 https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140828-F5_BIG-IP_Reflected_XSS_v10.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4023 · Security Note
• https://support.f5.com/kb/en-us/solutions/public/15000/500/sol15532.html · Vendor Advisory
• http://securitytracker.com/id/1030776 · Note