Date Published: 2021-09-24
QID 375880: F5 BIG-IP Application Security Manager (ASM), Local Traffic Manager (LTM), Access Policy Manager (APM) Hypertext Transfer Protocol (HTTP) Vulnerability (K93231374)
F5 BIG-IP ASM (Application Security Manager) is a flexible web application firewall that secures web applications in traditional, virtual, and private cloud environments.
F5 BIG-IP (LTM) Local Traffic Manager is the most popular module offered on F5 Networks BIG-IP platform. The real power of the LTM is it is a Full Proxy, allowing you to augment client and server side connections. All while making informed load balancing decisions on availability, performance, and persistence.
F5 BIG-IP Access Policy Manager (APM) is a secure, flexible, high-performance solution that provides unified global access to your network, cloud, and applications.
When an HTTP profile is configured on a virtual server, undisclosed requests can cause a significant increase in system resource utilization. (CVE-2021-23042)
Vulnerable Component: BIG-IP ASM, APM, LTM
16.0.0 - 220.127.116.11
15.1.0 - 15.1.2
14.1.0 - 14.1.3
13.1.0 - 13.1.3
12.1.0 - 12.1.5
QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.
System performance degradation can occur until the process is either forced to restart or manually restarted. This vulnerability allows a remote attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system.
- K93231374 - support.f5.com/csp/article/K93231374
CVEs related to QID 375880