| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| big-ip access policy manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip advanced firewall manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip analytics | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip application acceleration manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip application security manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip domain name system | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip edge gateway | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip fraud protection service | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip global traffic manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip link controller | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip local traffic manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip policy enforcement manager | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 | |
| big-ip webaccelerator | = 14.0.0= 14.1.0≥ 12.1.3, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.2 |
Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン