Description
An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| F5 | BIG-IQ | 8.4.0 – < 8.4.1 | 8.4.1 |
References
- https://my.f5.com/manage/s/article/K000158029 vendor-advisory patch