QID 378010

Date Published: 2023-03-08

QID 378010: F5 BIG-IP Application Security Manager (ASM) and Advanced WAF Attack Signature Check Failure on Certain Hypertext Transfer Protocol (HTTP) Requests (K53593534)

The BIG-IP ASM and F5 Advanced Web Application Firewall (Advanced WAF) attack signature check may fail to detect and block certain HTTP requests.

Vulnerable Component:
BIG-IP ASM,WAF

Affected Versions:
16.1.0 - 16.1.2
15.1.0 - 15.1.5
14.1.0 - 14.1.4
13.1.0 - 13.1.4
12.1.0 - 12.1.6
11.6.1 - 11.6.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

The attack signature check fails to detect and block such requests, as expected of a security policy.

CVSS V3 rated as High - 7.5 severity.

CVSS V2 rated as Low - 0 severity.

Solution

Please refer to K53593534 for more information.

Vendor References

K53593534 - my.f5.com/manage/s/article/K53593534

CVEs related to QID 378010

Software Advisories

Advisory ID	Software	Component	Link
K53593534			my.f5.com/manage/s/article/K53593534

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].