CVE-2013-0150
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
Vulnerabilidad de salto de directorio en una firma no especificada de un Applet Java en un componente client-side en F5 BIG-IP APM v10.1.0 hasta v10.2.4 y v11.0.0 hasta v11.3.0, FirePass v6.0.0 hasta v6.1.0 y v7.0.0, y otros productos "cuando APM se aprovisiona," permite que atacantes remotos puedan subir y ejecutar fichero de su elección a través de .. (punto punto) en el parámetro nombre de fichero.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-12-06 CVE Reserved
- 2013-08-09 CVE Published
- 2024-09-16 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/53477 | 2023-12-14 | |
| http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.html | 2023-12-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | 11.3.0 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version "11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Analytics" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | 11.3.0 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version "11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Protocol Security Module Search vendor "F5" for product "Big-ip Protocol Security Module" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Protocol Security Module" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Protocol Security Module Search vendor "F5" for product "Big-ip Protocol Security Module" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Protocol Security Module" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Wan Optimization Manager Search vendor "F5" for product "Big-ip Wan Optimization Manager" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Wan Optimization Manager" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Wan Optimization Manager Search vendor "F5" for product "Big-ip Wan Optimization Manager" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Wan Optimization Manager" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator" | >= 10.1.0 <= 10.2.4 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 10.1.0 <= 10.2.4" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator" | >= 11.0.0 <= 11.3.0 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 11.0.0 <= 11.3.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Firepass Search vendor "F5" for product "Firepass" | >= 6.0.0 <= 6.1.0 Search vendor "F5" for product "Firepass" and version " >= 6.0.0 <= 6.1.0" | - |
Affected
| ||||||
| F5 Search vendor "F5" | Firepass Search vendor "F5" for product "Firepass" | 7.0.0 Search vendor "F5" for product "Firepass" and version "7.0.0" | - |
Affected
| ||||||