PT-2014-7014 · F5 · F5 Big-Ip Edge Gateway+8

Published 2014-11-01 · Updated 2017-09-08 · CVE-2014-6032

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 10.0.0 through 11.6.0 F5 BIG-IP ASM versions 11.0 through 11.6.0 F5 BIG-IP GTM versions 10.0.0 through 11.6.0 F5 BIG-IP Link Controller versions 10.0.0 through 11.6.0 F5 BIG-IP AAM versions 11.4.0 through 11.6.0 F5 BIG-IP ARM versions 11.3.0 through 11.6.0 F5 BIG-IP Analytics versions 11.0.0 through 11.6.0 F5 BIG-IP APM and Edge Gateway versions 10.1.0 through 11.6.0 F5 BIG-IP PEM versions 11.3.0 through 11.6.0 F5 BIG-IP PSM versions 10.0.0 through 11.4.1 F5 BIG-IP WOM versions 10.0.0 through 11.3.0 F5 Enterprise Manager versions 2.1.0 through 3.1.1

Description The issue allows remote authenticated users to read arbitrary files and cause a denial of service via a crafted request. This can be achieved by exploiting the viewList or deal elements in the Configuration utility.

Recommendations For F5 BIG-IP LTM versions 10.0.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP ASM versions 11.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP GTM versions 10.0.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP Link Controller versions 10.0.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP AAM versions 11.4.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP ARM versions 11.3.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP Analytics versions 11.0.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP APM and Edge Gateway versions 10.1.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP PEM versions 11.3.0 through 11.6.0, update to a version outside of the affected range. For F5 BIG-IP PSM versions 10.0.0 through 11.4.1, update to a version outside of the affected range. For F5 BIG-IP WOM versions 10.0.0 through 11.3.0, update to a version outside of the affected range. For F5 Enterprise Manager versions 2.1.0 through 3.1.1, update to a version outside of the affected range.

Exploit

Fix

Related Identifiers

CVE-2014-6032

Affected Products

F5 Big-Ip Apm

F5 Big-Ip Edge Gateway

F5 Big-Ip Analytics

F5 Big-Ip Gtm

F5 Big-Ip Ltm

F5 Big-Ip Link Controller

F5 Big-Ip Pem

F5 Big-Ip Wom

F5 Enterprise Manager

References · 13

• 🔥 http://packetstormsecurity.com/files/128915/F5-Big-IP-11.3.0.39.0-XML-External-Entity-Injection-1.html · Exploit
• 🔥 http://securityfocus.com/bid/70834 · Exploit
• https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15605.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6032 · Security Note
• http://seclists.org/fulldisclosure/2014/Oct/130 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98403 · Note
• http://securitytracker.com/id/1031144 · Note
• http://seclists.org/fulldisclosure/2014/Oct/128 · Note
• https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-6032 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98402 · Note
• http://securitytracker.com/id/1031145 · Note
• http://seclists.org/fulldisclosure/2014/Oct/129 · Note
• https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-6033 · Note