Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2017-0301

EPSS 0.13% · P32
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-0301

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
F5 BIG-IP Access Policy Manager 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 BIG-IP Access Policy Manager(APM)是美国F5公司的一套访问和安全解决方案。该解决方案提供统一访问关键业务应用和网络的功能。 F5 BIG-IP APM 12.0.0版本至12.1.2版本、11.6.0版本至11.6.1版本和11.5.0版本至11.5.4版本中存在安全漏洞,该漏洞源于BIG-IP APM门户访问请求并没有回复预期的资源。攻击者可利用该漏洞访问内部的BIG-IP APM资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
F5 Networks, Inc.BIG-IP APM 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4 -

II. Public POCs for CVE-2017-0301

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-0301

登录查看更多情报信息。

Same Patch Batch · F5 Networks, Inc. · 2017-12-21 · 14 CVEs total

CVE-2017-0304F5 BIG-IP Advanced Firewall Manager Configuration utility SQL注入漏洞
CVE-2017-6129F5 BIG-IP Access Policy Manager 安全漏洞
CVE-2017-6132多款F5产品安全漏洞
CVE-2017-6133多款F5产品安全漏洞
CVE-2017-6134多款F5产品安全漏洞
CVE-2017-6135多款F5产品安全漏洞
CVE-2017-6136多款F5产品安全漏洞
CVE-2017-6138多款F5产品安全漏洞
CVE-2017-6139F5 BIG-IP Access Policy Manager 安全漏洞
CVE-2017-6140多款F5 BIG-IP平台多款F5产品安全漏洞
CVE-2017-6151多款F5产品安全漏洞
CVE-2017-6164多款F5产品安全漏洞
CVE-2017-6167多款F5产品竞争条件漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2017-0301

No comments yet


Leave a comment