Description
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| F5 | F5OS - Appliance | 1.3.0 – < 1.4.0 | 1.4.0 |
| F5 | F5OS - Chassis | 1.3.0 – < 1.6.0 | 1.6.0 |
References
- https://my.f5.com/manage/s/article/K000132800 vendor-advisory