Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-0304

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampere

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 Networks, Inc. BIG-IP AFM

  • 12.0.0, 12.1.0, 12.1.1, 12.1.2affected
  • 13.0.0affected

References