QID 378953

A remote unauthenticated attacker may be able to reuse, for a limited time, an authenticated user's session cookie generated from the Configuration utility and access through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. In the case of administrator role user session cookie reuse, it may allow full control of the BIG-IP VIPRION system.

Vulnerable Component: BIG-IP All Modules

Affected Versions:
16.1.0 - 16.1.3
15.1.0 - 15.1.8
14.1.0 - 14.1.5
13.1.0 - 13.1.5

QID Detection Logic(Authenticated):
This QID checks for the vulnerable versions of F5 BIG-IP devices using the tmsh command.

Note: This QID doesn't check for the available Mitigation, hence marked potential.

A successful exploit can allow the attacker to arbitrary system commands, create or delete files, or disable services