F5 Networks BIG-IP CVE-2014-8727 Directory Traversal Vulnerability
BID:71063
Info
F5 Networks BIG-IP CVE-2014-8727 Directory Traversal Vulnerability
| Bugtraq ID: | 71063 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-8727 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 12 2014 12:00AM |
| Updated: | Mar 19 2015 08:08AM |
| Credit: | Anastasios Monachos |
| Vulnerable: |
F5 BigIP Local Traffic Manager (LTM) 10.1 |
| Not Vulnerable: | |
Discussion
F5 Networks BIG-IP CVE-2014-8727 Directory Traversal Vulnerability
F5 Networks BIG-IP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
Local attackers can use a specially crafted request with directory-traversal sequences ('../') to enumerate and delete arbitrary files in the context of the application.
F5 Networks BIG-IP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.
Local attackers can use a specially crafted request with directory-traversal sequences ('../') to enumerate and delete arbitrary files in the context of the application.
References
F5 Networks BIG-IP CVE-2014-8727 Directory Traversal Vulnerability
References:
References: