2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"BIG-IP APM","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4"},{"status":"affected","version":"11.6.0, 11.6.1"},{"status":"affected","version":"12.0.0, 12.1.0, 12.1.1, 12.1.2"}]}],"source":"f5sirt@f5.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1C0312FC-8178-46DE-B4EE-00F2895073BA","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BC6C5628-14FF-4D75-B62E-D4B2707C1E3D","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"C9E574F6-34B6-45A6-911D-E5347DA22F69","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCF94129-8779-4D68-8DD4-B828CA633746","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"BA2E88AA-0523-48D0-8664-6AFDBCB6C940","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","matchCriteriaId":"CFA77C6B-72DB-4D57-87CF-11F2C7EDB828","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E33BCA5B-CE91-451C-9821-2023A9E461C1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B62FEC0-EE22-46E6-B811-8AB0EE4C3E2E","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FCD2044C-AC6F-4145-B1A0-8EB26DCF1F8C","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*","matchCriteriaId":"5FC866D4-CE8C-4408-AD1E-8643AC554CC9","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*","matchCriteriaId":"7563D979-BE37-4251-B92E-0DBDBE53F3FF","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected."},{"lang":"es","value":"En F5 BIG-IP APM, en sus versiones 1.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 y 12.1.2, las peticiones de acceso al portal BIG-IP APM no devuelven los recursos esperados en algunos casos. Esto puede permitir el acceso a recursos internos de BIG-IP APM. Sin embargo, los recursos de aplicación y los servidores backend no se ven afectados."}],"id":"CVE-2017-0301","lastModified":"2026-06-17T00:57:27.830","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"HIGH","accessVector":"ADJACENT_NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:A/AC:H/Au:S/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":2.5,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":0.9,"impactScore":6.0,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-12-21T17:29:00.217","references":[{"source":"f5sirt@f5.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040040"},{"source":"f5sirt@f5.com","tags":["Issue Tracking","Vendor Advisory"],"url":"https://support.f5.com/csp/article/K54358225"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040040"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"],"url":"https://support.f5.com/csp/article/K54358225"}],"sourceIdentifier":"f5sirt@f5.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|