CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the datastor kernel module in f5 big-ip analytics, apm, asm, link controller, and ltm 11.1.0 before 12.0.0, big-ip aam 11.4.0 before 12.0.0, big-ip afm, pem 11.3.0 before 12.0.0, big-ip edge gateway, webaccelerator, and wom 11.1.0 through 11.3.0, big-ip gtm 11.1.0 through 11.6.0, big-ip psm 11.1.0 through 11.4.1, big-iq cloud and security 4.0.0 through 4.5.0, big-iq device 4.2.0 through 4.5.0, big-iq adc 4.5.0, and enterprise manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain privileges by leveraging permission to upload and execute code.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-11-06
Last Modified Date: 2019-06-06