| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| big-ip access policy manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip advanced firewall manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip analytics | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip application acceleration manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip application security manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip domain name system | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip edge gateway | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip enterprise manager | = 3.1.1 | |
| big-ip global traffic manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip link controller | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip local traffic manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip policy enforcement manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip webaccelerator | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-ip websafe | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.2≥ 13.0.0, ≤ 13.1.0 | |
| big-iq centralized management | = 4.6.0≥ 5.0.0, ≤ 5.4.0 | |
| big-iq cloud and orchestration | = 1.0.0 | |
| f5 iworkflow | ≥ 2.0.2, ≤ 2.3.0 |
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン