Server side request forgery (ssrf)

2021-09-1423:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_advanced_web_application_firewallge16.0.0
big-ip_advanced_web_application_firewalllt16.0.1.2
big-ip_application_security_managerge16.0.0
big-ip_application_security_managerlt16.0.1.2

Name	Operator	Version
big-ip_advanced_web_application_firewall	ge	16.0.0
big-ip_advanced_web_application_firewall	lt	16.0.1.2
big-ip_application_security_manager	ge	16.0.0
big-ip_application_security_manager	lt	16.0.1.2

References

support.f5.com/csp/article/K52420610