CVE-2013-0150 Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and....
HighCVSS 9.3
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip access policy manager | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip access policy manager | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 11.3.0 | No fix listed |
| f5 big-ip analytics | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip application security manager | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip application security manager | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip edge gateway | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip edge gateway | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip global traffic manager | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip global traffic manager | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip link controller | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip link controller | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip local traffic manager | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip local traffic manager | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 11.3.0 | No fix listed |
| f5 big-ip protocol security module | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip protocol security module | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip wan optimization manager | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip wan optimization manager | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 big-ip webaccelerator | >= 10.1.0, <= 10.2.4 | No fix listed |
| f5 big-ip webaccelerator | >= 11.0.0, <= 11.3.0 | No fix listed |
| f5 firepass | >= 6.0.0, <= 6.1.0 | No fix listed |
| f5 firepass | = 7.0.0 | No fix listed |
References
- 53477 not-applicable third-party-advisory vendor-advisory
- support.f5.com vendor-advisory
- nealpoole.com third-party-advisory