F5 BIG-IP Application Security Manager Security Bypass Vulnerability

Bugtraq ID:	74479
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 05 2015 12:00AM
Updated:	May 05 2015 12:00AM
Credit:	Peter Lapp
Vulnerable:	F5 BIG-IP Application Security Manager 11.4 F5 BIG-IP Application Security Manager 11.4.1
Not Vulnerable:

F5 BIG-IP Application Security Manager Security Bypass Vulnerability

F5 BIG-IP Application Security Manager is prone to a security-bypass vulnerability.

Successfully exploiting these issues may allow attackers to perform unauthorized actions. This may lead to other attacks.

F5 BIG-IP Application Security Manager versions 11.4.0 and 11.4.1 are vulnerable; other versions may also be affected.

F5 BIG-IP Application Security Manager Security Bypass Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

F5 BIG-IP Application Security Manager Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

F5 BIG-IP Application Security Manager Security Bypass Vulnerability

References:

• BIG-IP Application Security Manager Homepage (F5)
  
• F5 ASM JSON Profile Bypass (Seclists.org)