2 lines
11 KiB
JSON
2 lines
11 KiB
JSON
{"affected":[{"affectedData":[{"product":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"13.0.0-13.0.1"},{"status":"affected","version":"12.1.0-12.1.3.6"},{"status":"affected","version":"11.2.1-11.6.3.2"}]}],"source":"f5sirt@f5.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"16F3D25A-7050-4A98-B3B5-3539FCC417AE","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"2CD4DFE3-9071-4808-AE24-2CCA5DB5BA80","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"733198D0-FF68-410D-86B9-21CE3C353916","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"35519CB7-C6BD-4EBF-A75F-03A5D2B9153C","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E5D00EED-F95D-4458-BDC4-3390DE85348B","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"988EB5E2-6099-41A5-BE4F-CA3999C335AE","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"4049C7FF-FAE6-4377-98F9-7375D180B232","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E5011C2D-FBB5-4117-BB97-11DE70117345","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"3D22FE2C-CC72-42C8-B68B-CEBE002D0787","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"64CAD197-79F4-41AE-956C-D23DCA556A52","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"79344F94-2CB8-4F08-9373-61614A38476C","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"ABBA0EE3-7A16-49CB-BE53-4E371AA4111F","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"AC26EC47-DB01-45B3-BD47-848B73334A99","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"6BB42D3A-71EE-4367-9F65-86404D74E59D","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"D851DC0C-616D-4274-9CAF-5CBDB0E6CD14","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5DAD0B3C-4E3B-48F1-84E1-E92BE40A657F","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"397AC4A5-B67C-483B-84F7-8CB294BB460C","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C56B7CD3-4224-4CF8-8FAB-9F44DAC1BE3F","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"6AB9039C-8ACE-4D9B-B90E-D593512A1E30","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"1466F808-2596-4028-8884-27EDD5CACB47","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"332B12F5-543D-450C-AEED-19BECC56CF13","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"586A9AE0-4417-4412-B573-73217F82FF73","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"6A11E433-943D-4D92-B45E-3FA268094278","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"FA780928-B3CA-42A5-B39B-B07F64733B52","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"05737070-098F-4F1B-90B1-4357A232DFB0","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"D4C3D6F5-D94D-46A3-991C-A11275B59F8E","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*","matchCriteriaId":"BCA2B639-DDB9-49B8-B792-5C8D0454FD03","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"2392B92F-B2A5-4548-AB20-3142D5EADE8E","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"57CCB85A-6F90-4DB7-B0F8-AE5250E1DCFE","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5A2564C2-BD67-4DDE-A122-74F7E6C22318","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"6B30938E-E843-4D52-8EFC-19107BCDB1D9","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"60189636-02D6-44CA-BE2A-7777E3C409CD","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*","matchCriteriaId":"5ACAA88B-9AFB-4D06-91CB-F73070FFFFD9","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E91FA1C5-2FC4-49F7-9AF7-A6BD446BFA2E","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5AD75094-3248-4D37-969E-75272F6F31D6","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"03A2FE7F-4668-47E5-906D-F89AEBC30545","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","matchCriteriaId":"205B6399-2EA9-44C0-8ED7-06B3EE724AC2","versionEndIncluding":"11.6.3","versionStartIncluding":"11.2.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","matchCriteriaId":"E7860523-E8B3-4BEE-853A-6F0B5BCDDA5A","versionEndIncluding":"12.1.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*","matchCriteriaId":"10B05525-4E48-4627-AF46-2A07D7DBFF32","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server."},{"lang":"es","value":"Los monitores de salud HTTPS F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6 o 11.2.1-11.6.3.2 no validan la identidad del servidor monitorizado."}],"id":"CVE-2018-5542","lastModified":"2026-06-17T02:00:30.043","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-07-25T14:29:00.540","references":[{"source":"f5sirt@f5.com","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K05112543"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K05112543"}],"sourceIdentifier":"f5sirt@f5.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}
|