CVE-2018-15904 A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.1.2-P4 mishandles the configured rules for blocking SQL inje...
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.1.2-P4 mishandles the configured rules for blocking SQL injection attacks, aka A10-2017-0008.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| a10networks acos web application firewall | = 2.7.1 | No fix listed |
| a10networks acos web application firewall | = 2.7.2 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p1 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p10 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p11 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p2 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p3 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p4 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p5 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p6 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p7 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p7-sp3 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p8 | No fix listed |
| a10networks acos web application firewall | = 2.7.2-p9 | No fix listed |
| a10networks acos web application firewall | = 4.1.0 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p1 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p10 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p2 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p3 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p4 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p5 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p6 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p7 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p8 | No fix listed |
| a10networks acos web application firewall | = 4.1.0-p9 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| a10networks acos web application firewall | = 4.1.1 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p1 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p2 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p3 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p4 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p5 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p6 | No fix listed |
| a10networks acos web application firewall | = 4.1.1-p7 | No fix listed |
| a10networks acos web application firewall | = 4.1.2 | No fix listed |
| a10networks acos web application firewall | = 4.1.2-p1 | No fix listed |
| a10networks acos web application firewall | = 4.1.2-p2 | No fix listed |
| a10networks acos web application firewall | = 4.1.2-p3 | No fix listed |
References
- www.a10networks.com mitigation vendor-advisory