CVE-2013-0150: Path Traversal
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0150?
CVE-2013-0150 has a medium severity rating due to the potential for remote code execution and unauthorized access.
How do I fix CVE-2013-0150?
To fix CVE-2013-0150, upgrade the affected F5 software to a more secure version that addresses this vulnerability.
Which versions of F5 products are affected by CVE-2013-0150?
CVE-2013-0150 affects F5 BIG-IP APM versions 10.1.0 to 10.2.4 and 11.0.0 to 11.3.0, as well as FirePass versions 6.0.0 to 7.0.0.
What type of vulnerability is CVE-2013-0150?
CVE-2013-0150 is classified as a directory traversal vulnerability within signed Java applets.
Can CVE-2013-0150 lead to data loss?
Yes, CVE-2013-0150 can potentially lead to data loss by allowing attackers to execute unauthorized commands on the affected system.