deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10544
Published: 2018-05-31
Description: uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down to less than 16mb of websocket payload which passes the length check of 16mb payload. This data will then inflate up to 256mb and crash the node process by exceeding V8's maximum string size. This affects uws >=0.10.0 <=0.10.8.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-20
References: https://github.com/uWebSockets/uWebSockets/commit/37deefd01f0875e133ea967122e3a5e421b8fcd9; https://nodesecurity.io/advisories/149; https://github.com/uWebSockets/uWebSockets/commit/37deefd01f0875e133ea967122e3a5e421b8fcd9
CVE: CVE-2016-10546
Published: 2018-05-31
Description: An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and design documents. The code execution engine for this branch is not properly sandboxed and may be used to run arbitrary JavaScript as well as system commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://nodesecurity.io/advisories/143; https://nodesecurity.io/advisories/143
CVE: CVE-2016-10547
Published: 2018-05-31
Description: Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In autoescape mode, all template vars should automatically be escaped. By using an array for the keys, such as `name[]=<script>alert(1)</script>`, it is possible to bypass autoescaping and inject content into the DOM.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/matt-/nunjucks_test; https://github.com/mozilla/nunjucks/issues/835; https://nodesecurity.io/advisories/147
CVE: CVE-2016-10548
Published: 2018-05-31
Description: Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on the server and user input is passed to the `calc` function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-94, CWE-79
References: https://gist.github.com/ChALkeR/415a41b561ebea9b341efbb40b802fc9; https://nodesecurity.io/advisories/144; https://gist.github.com/ChALkeR/415a41b561ebea9b341efbb40b802fc9
CVE: CVE-2016-10549
Published: 2018-05-31
Description: Sails is an MVC style framework for building realtime web applications. Version 0.12.7 and lower have an issue with the CORS configuration where the value of the origin header is reflected as the value for the Access-Control-Allow-Origin header. This would allow an attacker to make AJAX requests to vulnerable hosts through cross site scripting or a malicious HTML Document, effectively bypassing the Same Origin Policy. Note that this is only an issue when `allRoutes` is set to `true` and `origin` is set to `*` or left commented out in the sails CORS config file. The problem can be compounded when the cors `credentials` setting is not provided. At that point authenticated cross domain requests are possible.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-284, CWE-79
References: http://sailsjs.org/documentation/concepts/security/cors; http://sailsjs.org/documentation/reference/configuration/sails-config-cors; https://nodesecurity.io/advisories/148
CVE: CVE-2016-10550
Published: 2018-05-31
Description: sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS If user input goes into the `limit` or `order` parameters, a malicious user can put in their own SQL statements. This affects sequelize 3.16.0 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/sequelize/sequelize/pull/5167/commits/f282d85e60e3df5e57ecdb82adccb4eaef404f03; https://nodesecurity.io/advisories/112; https://github.com/sequelize/sequelize/pull/5167/commits/f282d85e60e3df5e57ecdb82adccb4eaef404f03
CVE: CVE-2016-10552
Published: 2018-05-31
Description: igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
CVSS Score: 7.4 (HIGH)
CWE: CWE-311, CWE-254
References: https://nodesecurity.io/advisories/116; https://nodesecurity.io/advisories/116
CVE: CVE-2016-10553
Published: 2018-05-31
Description: sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. A fix was pushed out that fixed potential SQL injection in sequelize 2.1.3 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/sequelize/sequelize/blob/master/changelog.md#300; https://nodesecurity.io/advisories/109; https://github.com/sequelize/sequelize/blob/master/changelog.md#300
CVE: CVE-2016-10554
Published: 2018-05-31
Description: sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, even though SQLite uses Postgres escaping.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d; https://nodesecurity.io/advisories/113; https://github.com/sequelize/sequelize/commit/c876192aa6ce1f67e22b26a4d175b8478615f42d
CVE: CVE-2016-10555
Published: 2018-05-31
Description: Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If the server is expecting RSA but is sent HMAC-SHA with RSA's public key, the server will think the public key is actually an HMAC private key. This could be used to forge any data an attacker wants.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-310
References: https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/; https://github.com/hokaccha/node-jwt-simple/pull/14; https://github.com/hokaccha/node-jwt-simple/pull/16
CVE: CVE-2016-10557
Published: 2018-05-31
Description: appium-chromedriver is a Node.js wrapper around Chromedriver. Versions below 2.9.4 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/162; https://nodesecurity.io/advisories/162
CVE: CVE-2016-10560
Published: 2018-05-31
Description: galenframework-cli is the node wrapper for the Galen Framework. galenframework-cli below 2.3.1 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/170; https://nodesecurity.io/advisories/170
CVE: CVE-2016-10561
Published: 2018-05-31
Description: Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://nodesecurity.io/advisories/150; https://nodesecurity.io/advisories/150
CVE: CVE-2016-10562
Published: 2018-05-31
Description: iedriver is an NPM wrapper for Selenium IEDriver. iedriver versions below 3.0.0 download binary resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/174; https://nodesecurity.io/advisories/174
CVE: CVE-2016-10563
Published: 2018-05-31
Description: During the installation process, the go-ipfs-deps module before 0.4.4 insecurely downloads resources over HTTP. This allows for a MITM attack to compromise the integrity of the resources used by this module and could allow for further compromise.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://github.com/diasdavid/go-ipfs-dep/pull/12; https://nodesecurity.io/advisories/156; https://github.com/diasdavid/go-ipfs-dep/pull/12
CVE: CVE-2016-10564
Published: 2018-05-31
Description: apk-parser is a tool to extract Android Manifest info from an APK file. apk-parser versions below 0.1.6 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/195; https://nodesecurity.io/advisories/195
CVE: CVE-2016-10565
Published: 2018-05-31
Description: operadriver is a Opera Driver for Selenium. operadriver versions below 0.2.3 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/196; https://nodesecurity.io/advisories/196
CVE: CVE-2016-10569
Published: 2018-05-31
Description: embedza is a module to create HTML snippets/embeds from URLs using info from oEmbed, Open Graph, meta tags. embedza versions below 1.2.4 download JavaScript resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested JavaScript file with an attacker controlled JavaScript file if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/187; https://nodesecurity.io/advisories/187
CVE: CVE-2016-10571
Published: 2018-05-31
Description: bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/220; https://nodesecurity.io/advisories/220
CVE: CVE-2016-10572
Published: 2018-05-31
Description: mongodb-instance before 0.0.3 installs mongodb locally. mongodb-instance downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-310
References: https://nodesecurity.io/advisories/235; https://nodesecurity.io/advisories/235
CVE: CVE-2018-11631
Published: 2018-05-31
Description: Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notifications via crafted Bluetooth Low Energy (BLE) traffic.
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/xMagass/bandexploit; https://github.com/xMagass/bandexploit
CVE: CVE-2018-11632
Published: 2018-05-31
Description: An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There's no nonce or capability check in the whatsapp_share_setting_add_update() function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://labs.threatpress.com/cross-site-request-forgery-csrf-in-add-social-share-messenger-buttons-whatsapp-and-viber-plugin/; https://wordpress.org/plugins/add-social-share-buttons/#developers; http://labs.threatpress.com/cross-site-request-forgery-csrf-in-add-social-share-messenger-buttons-whatsapp-and-viber-plugin/
CVE: CVE-2018-11633
Published: 2018-05-31
Description: An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings. The function woo_checkout_settings_page in the file class-woo-checkout-for-digital-goods-admin.php doesn't do any check against wp-admin/admin-post.php Cross-site request forgery (CSRF) and user capabilities.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://labs.threatpress.com/cross-site-request-forgery-csrf-in-woo-checkout-for-digital-goods-plugin/; https://wordpress.org/plugins/woo-checkout-for-digital-goods/#developers; http://labs.threatpress.com/cross-site-request-forgery-csrf-in-woo-checkout-for-digital-goods-plugin/
CVE: CVE-2018-10379
Published: 2018-05-31
Description: An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104491; https://about.gitlab.com/2018/04/30/security-release-gitlab-10-dot-7-dot-2-released/; http://www.securityfocus.com/bid/104491
CVE: CVE-2018-1496
Published: 2018-05-31
Description: IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141219.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22015420; http://www.securityfocus.com/bid/104374; https://exchange.xforce.ibmcloud.com/vulnerabilities/141219
CVE: CVE-2018-1532
Published: 2018-05-31
Description: IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22015978; https://exchange.xforce.ibmcloud.com/vulnerabilities/142430; http://www.ibm.com/support/docview.wss?uid=swg22015978
CVE: CVE-2018-6552
Published: 2018-05-31
Description: Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace. This flaw affects versions 2.20.8-0ubuntu4 through 2.20.9-0ubuntu7, 2.20.7-0ubuntu3.7, 2.20.7-0ubuntu3.8, 2.20.1-0ubuntu2.15 through 2.20.1-0ubuntu2.17, and 2.14.1-0ubuntu3.28.
CVSS Score: 7.8 (HIGH)
References: https://usn.ubuntu.com/3664-2/; https://usn.ubuntu.com/usn/usn-3664-1; https://usn.ubuntu.com/3664-2/
CVE: CVE-2018-9186
Published: 2018-05-31
Description: A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104371; https://fortiguard.com/advisory/FG-IR-18-059; http://www.securityfocus.com/bid/104371
CVE: CVE-2018-11645
Published: 2018-06-01
Description: psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=b60d50b7567369ad856cebe1efb6cd7dd2284219; https://access.redhat.com/errata/RHSA-2019:2281; https://bugs.ghostscript.com/show_bug.cgi?id=697193
CVE: CVE-2018-11646
Published: 2018-06-01
Description: webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
CVSS Score: 7.5 (HIGH)
References: https://bugs.webkit.org/show_bug.cgi?id=186164; https://bugzilla.gnome.org/show_bug.cgi?id=795740; https://security.gentoo.org/glsa/201808-04
CVE: CVE-2018-8921
Published: 2018-06-01
Description: Cross-site scripting (XSS) vulnerability in File Sharing Notify Toast in Synology Drive before 1.0.2-10275 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/en-global/support/security/Synology_SA_18_11; https://www.synology.com/en-global/support/security/Synology_SA_18_11
CVE: CVE-2018-8922
Published: 2018-06-01
Description: Improper access control vulnerability in Synology Drive before 1.0.2-10275 allows remote authenticated users to access non-shared files or folders via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.synology.com/en-global/support/security/Synology_SA_18_11; https://www.synology.com/en-global/support/security/Synology_SA_18_11
CVE: CVE-2017-17171
Published: 2018-06-01
Description: Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-20
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone
CVE: CVE-2017-6153
Published: 2018-06-01
Description: Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a "Zip Bomb" attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: http://www.securitytracker.com/id/1041024; https://support.f5.com/csp/article/K52167636; http://www.securitytracker.com/id/1041024
CVE: CVE-2018-11649
Published: 2018-06-01
Description: Hue 3.12 has XSS via the /pig/save/ name and script parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Blck4/HUE-Exploit; https://github.com/Blck4/HUE-Exploit
CVE: CVE-2018-11650
Published: 2018-06-01
Description: Graylog before v2.4.4 has an XSS security issue with unescaped text in notifications, related to toastr and util/UserNotification.js.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Graylog2/graylog2-server/pull/4727; https://www.graylog.org/post/announcing-graylog-v2-4-4; https://github.com/Graylog2/graylog2-server/pull/4727
CVE: CVE-2018-11651
Published: 2018-06-01
Description: Graylog before v2.4.4 has an XSS security issue with unescaped text in dashboard names, related to components/dashboard/Dashboard.jsx, components/dashboard/EditDashboardModal.jsx, and pages/ShowDashboardPage.jsx.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Graylog2/graylog2-server/pull/4739; https://www.graylog.org/post/announcing-graylog-v2-4-4; https://github.com/Graylog2/graylog2-server/pull/4739
CVE: CVE-2018-5513
Published: 2018-06-01
Description: On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impacted by this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1041017; https://support.f5.com/csp/article/K46940010; http://www.securitytracker.com/id/1041017
CVE: CVE-2018-5521
Published: 2018-06-01
Description: On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041021; https://support.f5.com/csp/article/K23124150; http://www.securitytracker.com/id/1041021
CVE: CVE-2018-5522
Published: 2018-06-01
Description: On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104384; https://support.f5.com/csp/article/K54130510; http://www.securityfocus.com/bid/104384
CVE: CVE-2018-5523
Published: 2018-06-01
Description: On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
CVSS Score: 7.2 (HIGH)
References: http://www.securitytracker.com/id/1041022; http://www.securitytracker.com/id/1041023; https://support.f5.com/csp/article/K50254952
CVE: CVE-2018-5524
Published: 2018-06-01
Description: Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1, virtual servers configured with Client SSL or Server SSL profiles which make use of network hardware security module (HSM) functionality are exposed and impacted by this issue.
CVSS Score: 5.3 (MEDIUM)
References: http://www.securitytracker.com/id/1041020; https://support.f5.com/csp/article/K53931245; http://www.securitytracker.com/id/1041020
CVE: CVE-2018-5525
Published: 2018-06-01
Description: A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive customer data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1041018; https://support.f5.com/csp/article/K00363258; http://www.securitytracker.com/id/1041018