Directory traversal

2013-08-0920:56:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.0%

JSON

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products “when APM is provisioned,” allows remote attackers to upload and execute arbitrary files via a … (dot dot) in the filename parameter.

CPENameOperatorVersion
big-ip_access_policy_managerge10.1.0
big-ip_access_policy_managerle10.2.4
big-ip_access_policy_managerge11.0.0
big-ip_access_policy_managerle11.3.0
big-ip_advanced_firewall_managereq11.3.0
big-ip_analyticsge11.0.0
big-ip_analyticsle11.3.0
big-ip_application_security_managerge11.0.0
big-ip_application_security_managerle11.3.0
big-ip_application_security_managerge10.1.0

Name	Operator	Version
big-ip_access_policy_manager	ge	10.1.0
big-ip_access_policy_manager	le	10.2.4
big-ip_access_policy_manager	ge	11.0.0
big-ip_access_policy_manager	le	11.3.0
big-ip_advanced_firewall_manager	eq	11.3.0
big-ip_analytics	ge	11.0.0
big-ip_analytics	le	11.3.0
big-ip_application_security_manager	ge	11.0.0
big-ip_application_security_manager	le	11.3.0
big-ip_application_security_manager	ge	10.1.0