| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| big-ip access policy manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip advanced firewall manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip analytics | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip application acceleration manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip application security manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip domain name system | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip edge gateway | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip global traffic manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip link controller | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip local traffic manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip policy enforcement manager | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip webaccelerator | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 | |
| big-ip websafe | ≥ 11.2.1, ≤ 11.6.3≥ 12.1.0, ≤ 12.1.3≥ 13.0.0, ≤ 13.1.0 |
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access (for example, any user when licensed for Appliance Mode), this allows more permissive file access than intended.
これらの製品をお使いですか?サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン