Design/Logic Flaw

2021-06-1016:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service’s temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_access_policy_managerge11.6.1
big-ip_access_policy_managerle11.6.5
big-ip_access_policy_managerge12.1.0
big-ip_access_policy_managerle12.1.6
big-ip_access_policy_manager_clientge7.2.1
big-ip_access_policy_manager_clientlt7.2.1.3
big-ip_access_policy_manager_clientge7.1.6
big-ip_access_policy_manager_clientle7.1.9.9

Name	Operator	Version
big-ip_access_policy_manager	ge	11.6.1
big-ip_access_policy_manager	le	11.6.5
big-ip_access_policy_manager	ge	12.1.0
big-ip_access_policy_manager	le	12.1.6
big-ip_access_policy_manager_client	ge	7.2.1
big-ip_access_policy_manager_client	lt	7.2.1.3
big-ip_access_policy_manager_client	ge	7.1.6
big-ip_access_policy_manager_client	le	7.1.9.9

References

support.f5.com/csp/article/K08503505