Test Kennung:	1.3.6.1.4.1.25623.1.0.105220
Kategorie:	F5 Local Security Checks
Titel:	F5 BIG-IP - Directory traversal vulnerability CVE-2014-8727
Zusammenfassung:	F5 BIG-IP is prone to a directory traversal vulnerability.
Beschreibung:	Summary: F5 BIG-IP is prone to a directory traversal vulnerability. Vulnerability Insight: Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the 'Resource Administrator' or 'Administrator' role to enumerate and delete arbitrary files via a .. (dot dot) in the name parameter to (1) tmui/Control/jspmap/tmui/system/archive/properties.jsp or (2) tmui/Control/form. Vulnerability Impact: An attacker with Resource Administrator or Administrator role access to the BIG-IP Configuration utility may be able to delete arbitrary files. Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.2 CVSS Vector: AV:L/AC:L/Au:S/C:N/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8727 BugTraq ID: 71063 http://www.securityfocus.com/bid/71063 http://www.exploit-db.com/exploits/35222 http://packetstormsecurity.com/files/129084/F5-BIG-IP-10.1.0-Directory-Traversal.html http://www.securitytracker.com/id/1031216 XForce ISS Database: f5-bigip-cve20148727-dir-trav(98676) https://exchange.xforce.ibmcloud.com/vulnerabilities/98676
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.