| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| big-ip access policy manager | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip advanced firewall manager | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip analytics | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip application acceleration manager | = 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip application security manager | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip domain name system | = 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip edge gateway | = 11.2.1 | |
| big-ip global traffic manager | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1 | |
| big-ip link controller | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip local traffic manager | = 11.2.1= 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip policy enforcement manager | = 11.4.0= 11.4.1= 11.5.0= 11.5.1= 11.5.2= 11.5.3= 11.5.4= 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip protocol security module | = 11.4.0= 11.4.1 | |
| big-ip wan optimization manager | = 11.2.1 | |
| big-ip webaccelerator | = 11.2.1 | |
| big-ip websafe | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| enterprise manager | = 3.1.1 |
A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an authenticated user to inject arbitrary web script or HTML. Exploitation requires Resource Administrator or Administrator privileges, and it could cause the Configuration utility client to become unstable.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン