Lucene search
HistorySep 17, 2015 - 4:59 p.m.
CVE-2015-4040
cve-2015-4040
directory traversal
f5 big-ip
remote authenticated access
arbitrary files access
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.033 Low
EPSS
Percentile
91.4%
Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.
Affected configurations
Node
f5enterprise_managerMatch3.0.0
ORf5enterprise_managerMatch3.1.0
ORf5enterprise_managerMatch3.1.1
Node
f5big-ip_access_policy_managerRangeβ€11.6.0
ORf5big-ip_advanced_firewall_managerRangeβ€11.6.0
ORf5big-ip_analyticsRangeβ€11.6.0
ORf5big-ip_application_acceleration_managerRangeβ€11.6.0
ORf5big-ip_application_security_managerRangeβ€11.6.0
ORf5big-ip_edge_gatewayRangeβ€11.3.0
ORf5big-ip_global_traffic_managerRangeβ€11.3.0
ORf5big-ip_link_controllerRangeβ€11.3.0
ORf5big-ip_local_traffic_managerRangeβ€11.6.0
ORf5big-ip_policy_enforcement_managerRangeβ€11.3.0
ORf5big-ip_protocol_security_moduleRangeβ€11.3.0
ORf5big-ip_wan_optimization_managerRangeβ€11.3.0
ORf5big-ip_webacceleratorRangeβ€11.3.0
Related
f5
f5
SOL17253 - BIG-IP Configuration utility vulnerability CVE-2015-4040
2015-09-09 00:00:00
K17253 : BIG-IP Configuration utility vulnerability CVE-2015-4040
2015-09-09 00:00:00
exploitpack
exploitpack
F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - Directory Traversal
2015-10-13 00:00:00
zdt
zdt
F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - File Path Traversal Vulnerability
2015-10-13 00:00:00
nvd
nvd
CVE-2015-4040
2015-09-17 16:59:01
seebug
seebug
F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 ζδ»Άθ―»εζΌζ΄
2015-12-24 00:00:00
packetstorm
packetstorm
F5 BigIP 10.2.4 Build 595.0 HF3 Path Traversal
2015-10-12 00:00:00
openvas
openvas
F5 BIG-IP - BIG-IP Configuration utility vulnerability CVE-2015-4040
2015-09-18 00:00:00
prion
prion
Directory traversal
2015-09-17 16:59:00
cvelist
cvelist
CVE-2015-4040
2015-09-17 16:00:00
nessus
nessus
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K17253)
2015-09-10 00:00:00
exploitdb
exploitdb
F5 Big-IP 10.2.4 Build 595.0 Hotfix HF3 - Directory Traversal
2015-10-13 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.033 Low
EPSS
Percentile
91.4%
Related for CVE-2015-4040