Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5493 State: PUBLISHED Published: 2020-05-07T12:31:18 Last Updated: 2024-08-05T05:40:50.446Z Vendors: n/a Products: ATTO FibreBridge 7500N Problem Types: Denial of Service (DoS) Description: ATTO FibreBridge 7500N firmware versions prior to 2.90 are susceptible to a vulnerability which allows an unauthenticated remote attacker to cause Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20200507-0001/
CVE ID: CVE-2018-5494 State: REJECTED Published: 2022-08-25T17:22:20 Last Updated: 2022-08-25T17:22:20 Description: No description available.
CVE ID: CVE-2018-5495 State: PUBLISHED Published: 2018-11-14T19:00:00 Last Updated: 2024-08-05T05:40:50.566Z Vendors: NetApp Products: StorageGRID Webscale Problem Types: Remote Code Execution Description: All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181114-0001/
CVE ID: CVE-2018-5496 State: PUBLISHED Published: 2018-12-04T20:00:00 Last Updated: 2024-08-05T05:40:49.836Z Vendors: NetApp Products: Data ONTAP operating in 7-Mode Problem Types: Information Disclosure Description: Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20181204-0001/
CVE ID: CVE-2018-5497 State: PUBLISHED Published: 2019-01-24T20:00:00Z Last Updated: 2024-09-17T01:31:48.583Z Vendors: NetApp Products: Clustered Data ONTAP Problem Types: Information Disclosure Description: Clustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190109-0001/
CVE ID: CVE-2018-5498 State: PUBLISHED Published: 2019-02-01T16:00:00Z Last Updated: 2024-09-17T01:41:44.338Z Vendors: NetApp Products: Clustered Data ONTAP Problem Types: Denial of Service Description: Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitation of this vulnerability will allow a remote authenticated attacker to cause a Denial of Service (DoS) on affected versions of clustered Data ONTAP configured for multiprotocol access. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-201901
ccess. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190115-0001/
CVE ID: CVE-2018-5499 State: PUBLISHED Published: 2019-02-12T20:00:00Z Last Updated: 2024-09-16T23:06:11.957Z Vendors: NetApp Products: ATTO FibreBridge 7500N Problem Types: Denial of Service (DoS) Description: ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20190125-0003/
CVE ID: CVE-2018-5500 State: PUBLISHED Published: 2018-03-01T16:00:00Z Last Updated: 2024-09-16T20:41:38.281Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe Problem Types: DoS Description: On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP (MCTCP) connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP (MCTCP) feature enabled will be affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K33211839 - http://www.securityfocus.com/
tes: - CVE Program Container: References: - https://support.f5.com/csp/article/K33211839 - http://www.securityfocus.com/bid/103217
CVE ID: CVE-2018-5501 State: PUBLISHED Published: 2018-03-01T16:00:00Z Last Updated: 2024-09-17T02:37:02.573Z Vendors: F5 Networks, Inc. Products: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe Problem Types: DoS Description: In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K44200194 - http://www.securityfocus.com/bid/103211
CVE ID: CVE-2018-5502 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-17T00:06:57.975Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client certificate authentication is not enabled by default in Client SSL profile. There is no control plane exposure.
Client certificate authentication is not enabled by default in Client SSL profile. There is no control plane exposure. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K43121447 - http://www.securitytracker.com/id/1040561
CVE ID: CVE-2018-5503 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T17:23:05.265Z Vendors: F5 Networks, Inc. Products: BIG-IP (PEM) Problem Types: DoS Description: On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040560 - https://support.f5.com/csp/article/K54562183
CVE ID: CVE-2018-5504 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T19:24:15.158Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS & RCE Description: In some circumstances, the Traffic Management Microkernel (TMM) does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service (DoS) or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or 12.1.0 - 12.1.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
.0.0 - 13.1.0.3 or 12.1.0 - 12.1.3.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040558 - https://support.f5.com/csp/article/K11718033
CVE ID: CVE-2018-5505 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T16:23:50.452Z Vendors: F5 Networks, Inc. Products: BIG-IP (ASM and Analytics) Problem Types: DoS Description: On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K23520761 - http://www.securityfocus.com/bid/103505 - http://www.securitytracker.com/id/1040559
CVE ID: CVE-2018-5506 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-16T19:10:30.356Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: Information disclosure Description: In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices. Additional Analyst
used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K65355492
CVE ID: CVE-2018-5507 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-16T23:35:55.823Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K52521791
CVE ID: CVE-2018-5508 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-17T04:09:05.643Z Vendors: F5 Networks, Inc. Products: BIG-IP (PEM) Problem Types: DoS Description: On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K10329515
CVE ID: CVE-2018-5509 State: PUBLISHED Published: 2018-03-22T18:00:00Z Last Updated: 2024-09-16T21:04:19.837Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe) Problem Types: DoS Description: On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration which exposes this issue is en
n previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration which exposes this issue is enabled and the virtual server receives non TCP traffic. With the fix of this issue, additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. There is only data plane exposure to this issue with a non-standard configuration. There is no control plane exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040562 - https://support.f5.com/csp/article/K49440608 - http://www.securityfocus.com/bid/103504
CVE ID: CVE-2018-5510 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-16T17:58:47.032Z Vendors: F5 Networks, Inc. Products: BIG-IP (Analytics, LTM, AAM, AFM, APM, ASM, DNS, Edge, Gateway, GTM Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K77671456
CVE ID: CVE-2018-5511 State: PUBLISHED Published: 2018-04-13T13:00:00Z Last Updated: 2024-09-16T16:38:21.634Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: Privilege escalation Description: On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K30500703 - https://www.exploit-db.
yst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K30500703 - https://www.exploit-db.com/exploits/46600/ - http://packetstormsecurity.com/files/152213/VMware-Host-VMX-Process-Impersonation-Hijack-Privilege-Escalation.html
CVE ID: CVE-2018-5512 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-16T17:38:32.795Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104095 - https://support.f5.com/csp/article/K51754851 - http://www.securitytracker.com/id/1040801
CVE ID: CVE-2018-5513 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-16T19:36:53.985Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impacted by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp
not impacted by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K46940010 - http://www.securitytracker.com/id/1041017
CVE ID: CVE-2018-5514 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-16T23:10:56.623Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K45320419 - http://www.securitytracker.com/id/1040804 - http://www.securityfocus.com/bid/104097
CVE ID: CVE-2018-5515 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-17T00:21:27.335Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104099 - http://www.securitytracker.com/id/1040802 - https://support.f5.com/csp/article/K62750376
CVE ID: CVE-2018-5516 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-17T02:41:51.080Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe), Enterprise Manager, BIG-IQ Centralized Management, BIG-IQ Cloud and Orchestration, iWorkflow Problem Types: Privilege escalation Description: On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file s
.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K37442533 - http://www.securitytracker.com/id/1040800 - http://www.securitytracker.com/id/1040799
CVE ID: CVE-2018-5517 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-17T04:15:19.995Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040805 - https://support.f5.com/csp/article/K255734
Program Container: References: - http://www.securitytracker.com/id/1040805 - https://support.f5.com/csp/article/K25573437
CVE ID: CVE-2018-5518 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-16T19:00:38.214Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core file. This issue is only exploitable on a VCMP guest which is operating in "host-only" or "bridged" mode. VCMP g
a core file. This issue is only exploitable on a VCMP guest which is operating in "host-only" or "bridged" mode. VCMP guests which are "isolated" are not impacted by this issue and do not provide mechanism to exploit the vulnerability. Guests which are deployed in "Appliance Mode" may be impacted however the exploit is not possible from an Appliance Mode guest. To exploit this vulnerability root access on a guest system deployed as "host-only" or "bridged" mode is required. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K03165684 - http://www.securitytracker.com/id/1040797
CVE ID: CVE-2018-5519 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-16T22:51:17.364Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: Privilege escalation Description: On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access (for example, any user when licensed for Appliance Mode), this allows more permissive file access than intended. Additional Analyst Notes: - CVE Program Cont
for Appliance Mode), this allows more permissive file access than intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040803 - https://support.f5.com/csp/article/K46121888
CVE ID: CVE-2018-5520 State: PUBLISHED Published: 2018-05-02T13:00:00Z Last Updated: 2024-09-16T23:00:47.315Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: Privilege escalation Description: On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell (tmsh) may allow an administrative user to use the dig utility to gain unauthorized access to file system resources. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K02043709 - http://www.securitytracker.com/id/10407
Program Container: References: - https://support.f5.com/csp/article/K02043709 - http://www.securitytracker.com/id/1040798
CVE ID: CVE-2018-5521 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T01:06:55.468Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) Problem Types: XSS Description: On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041021 - https://support.f5.com/csp/article/K23124150
CVE ID: CVE-2018-5522 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T03:23:04.167Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) Problem Types: DoS Description: On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104384 - https://support.f5.com/csp/article/K54130510
CVE ID: CVE-2018-5523 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-16T17:33:09.067Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager Problem Types: Privilege Escalation Description: On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. Additional Analyst Notes: - CVE Prog
BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K50254952 - http://www.securitytracker.com/id/1041023 - http://www.securitytracker.com/id/1041022
CVE ID: CVE-2018-5524 State: PUBLISHED Published: 2018-06-01T14:00:00Z Last Updated: 2024-09-17T03:34:09.169Z Vendors: F5 Networks, Inc. Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, FPS, Link Controller, PEM, WebAccelerator) Problem Types: DoS Description: Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1, virtual servers configured with Client SSL or Server SSL profiles which make use of network hardware security module (HSM) functionality are exposed and impacted by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041020 - https://support.f5.com/csp/article/K5
- CVE Program Container: References: - http://www.securitytracker.com/id/1041020 - https://support.f5.com/csp/article/K53931245