On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privileged attacker with no bash access may be able to access Certificate and Key files using Secure Copy (SCP) protocol from a remote system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Weakness
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_access_policy_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_access_policy_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_access_policy_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_access_policy_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_access_policy_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_access_policy_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_access_policy_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_access_policy_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_access_policy_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_access_policy_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_access_policy_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_access_policy_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_access_policy_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_access_policy_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_access_policy_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_access_policy_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_access_policy_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_access_policy_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_access_policy_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_access_policy_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_access_policy_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_access_policy_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_access_policy_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_access_policy_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_advanced_firewall_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_advanced_firewall_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_advanced_firewall_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_advanced_firewall_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_advanced_firewall_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_advanced_firewall_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_analytics | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_analytics | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_analytics | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_analytics | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_analytics | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_analytics | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_analytics | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_analytics | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_analytics | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_analytics | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_analytics | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_analytics | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_analytics | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_analytics | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_analytics | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_analytics | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_analytics | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_analytics | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_analytics | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_analytics | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_analytics | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_analytics | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_analytics | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_analytics | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_analytics | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_analytics | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_analytics | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_analytics | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_analytics | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_analytics | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_analytics | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_application_acceleration_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_application_acceleration_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_application_acceleration_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_application_acceleration_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_application_acceleration_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_application_acceleration_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_application_acceleration_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_application_acceleration_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_application_acceleration_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_application_acceleration_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_application_acceleration_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_application_acceleration_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_application_security_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_application_security_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_application_security_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_application_security_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_application_security_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_application_security_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_application_security_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_application_security_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_application_security_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_application_security_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_application_security_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_application_security_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_application_security_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_application_security_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_application_security_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_application_security_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_application_security_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_application_security_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_application_security_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_application_security_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_application_security_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_application_security_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_application_security_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_application_security_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_application_security_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_application_security_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_application_security_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_application_security_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_application_security_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_application_security_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_application_security_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_domain_name_system | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_domain_name_system | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_domain_name_system | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_domain_name_system | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_domain_name_system | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_domain_name_system | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_domain_name_system | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_domain_name_system | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_domain_name_system | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_domain_name_system | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_domain_name_system | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_domain_name_system | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_domain_name_system | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_domain_name_system | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_domain_name_system | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_domain_name_system | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_domain_name_system | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_domain_name_system | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_domain_name_system | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_domain_name_system | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_domain_name_system | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_domain_name_system | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_domain_name_system | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_domain_name_system | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_domain_name_system | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_domain_name_system | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_domain_name_system | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_domain_name_system | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_domain_name_system | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_domain_name_system | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_domain_name_system | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_fraud_protection_service | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_fraud_protection_service | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_fraud_protection_service | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_fraud_protection_service | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_fraud_protection_service | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_fraud_protection_service | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_fraud_protection_service | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_fraud_protection_service | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_fraud_protection_service | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_fraud_protection_service | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_fraud_protection_service | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_fraud_protection_service | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_fraud_protection_service | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_fraud_protection_service | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_fraud_protection_service | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_fraud_protection_service | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_fraud_protection_service | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_fraud_protection_service | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_fraud_protection_service | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_fraud_protection_service | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_fraud_protection_service | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_fraud_protection_service | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_fraud_protection_service | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_fraud_protection_service | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_fraud_protection_service | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_global_traffic_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_global_traffic_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_global_traffic_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_global_traffic_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_global_traffic_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_global_traffic_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_global_traffic_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_global_traffic_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_global_traffic_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_global_traffic_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_global_traffic_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_global_traffic_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_global_traffic_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_global_traffic_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_global_traffic_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_global_traffic_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_global_traffic_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_global_traffic_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_global_traffic_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_link_controller | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_link_controller | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_link_controller | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_link_controller | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_link_controller | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_link_controller | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_link_controller | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_link_controller | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_link_controller | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_link_controller | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_link_controller | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_link_controller | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_link_controller | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_link_controller | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_link_controller | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_link_controller | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_link_controller | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_link_controller | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_link_controller | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_link_controller | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_link_controller | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_link_controller | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_link_controller | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_link_controller | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_link_controller | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_link_controller | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_link_controller | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_link_controller | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_link_controller | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_link_controller | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_link_controller | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_local_traffic_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_local_traffic_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_local_traffic_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_local_traffic_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_local_traffic_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_local_traffic_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_local_traffic_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_local_traffic_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_local_traffic_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_local_traffic_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_local_traffic_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_local_traffic_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_local_traffic_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_local_traffic_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_local_traffic_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_local_traffic_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_local_traffic_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_local_traffic_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_local_traffic_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.2 (including) | 11.6.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.3 (including) | 11.6.3 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.4 (including) | 11.6.4 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.5 (including) | 11.6.5 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.3 (including) | 12.1.3 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.4 (including) | 12.1.4 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.5 (including) | 12.1.5 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.6 (including) | 12.1.6 (including) |
| Big-ip_policy_enforcement_manager | F5 | 13.1.0 (including) | 13.1.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 13.1.1 (including) | 13.1.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 13.1.3 (including) | 13.1.3 (including) |
| Big-ip_policy_enforcement_manager | F5 | 13.1.4 (including) | 13.1.4 (including) |
| Big-ip_policy_enforcement_manager | F5 | 13.1.5 (including) | 13.1.5 (including) |
| Big-ip_policy_enforcement_manager | F5 | 14.1.0 (including) | 14.1.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 14.1.2 (including) | 14.1.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 14.1.3 (including) | 14.1.3 (including) |
| Big-ip_policy_enforcement_manager | F5 | 14.1.4 (including) | 14.1.4 (including) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.0 (including) | 15.1.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.1 (including) | 15.1.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.2 (including) | 15.1.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.3 (including) | 15.1.3 (including) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.4 (including) | 15.1.4 (including) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.5 (including) | 15.1.5 (including) |
| Big-ip_policy_enforcement_manager | F5 | 16.1.0 (including) | 16.1.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 16.1.1 (including) | 16.1.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 16.1.2 (including) | 16.1.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 17.0.0 (including) | 17.0.0 (including) |
| Big-iq_centralized_management | F5 | 7.0.0 (including) | 7.1.0 (including) |
| Big-iq_centralized_management | F5 | 8.0.0 (including) | 8.2.0 (including) |
Potential Mitigations
- Run the code in a “jail” or similar sandbox environment that enforces strict boundaries between the process and the operating system. This may effectively restrict which files can be accessed in a particular directory or which commands can be executed by the software.
- OS-level examples include the Unix chroot jail, AppArmor, and SELinux. In general, managed code may provide some protection. For example, java.io.FilePermission in the Java SecurityManager allows the software to specify restrictions on file operations.
- This may not be a feasible solution, and it only limits the impact to the operating system; the rest of the application may still be subject to compromise.
- Be careful to avoid CWE-243 and other weaknesses related to jails.
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/1.html
- https://cwe.mitre.org/data/definitions/122.html
- https://cwe.mitre.org/data/definitions/127.html
- https://cwe.mitre.org/data/definitions/17.html
- https://cwe.mitre.org/data/definitions/180.html
- https://cwe.mitre.org/data/definitions/206.html
- https://cwe.mitre.org/data/definitions/234.html
- https://cwe.mitre.org/data/definitions/60.html
- https://cwe.mitre.org/data/definitions/61.html
- https://cwe.mitre.org/data/definitions/62.html
- https://cwe.mitre.org/data/definitions/642.html