Skip to content
OpenAdvisories
Unscored CVE-2017-0304 EUVD-2017-0660GHSA-56cq-cx36-9v3r

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a…

Published Dec 21, 2017 · Updated Sep 16, 2024 · Assigned by f5

Vendor: F5 Product: BIG-IP (AFM) Category: Network devices

Description

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected.

Affected products

VendorProductAffectedFixed
F5 Networks BIG-IP AFM 12.0.0, 12.1.0, 12.1.1, 12.1.2, 13.0.0 —

References