CVE-2015-4040: Path Traversal
Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4040?
The severity of CVE-2015-4040 is considered high due to the potential for unauthorized file access by remote authenticated users.
How do I fix CVE-2015-4040?
To fix CVE-2015-4040, upgrade to F5 BIG-IP version 12.0.0 or later and ensure that all Enterprise Manager installations are updated to version 3.1.2 or later.
What types of software are affected by CVE-2015-4040?
CVE-2015-4040 affects various versions of F5 BIG-IP products including Access Policy Manager, Advanced Firewall Manager, Analytics, Application Security Manager, and Enterprise Manager versions 3.0.0 to 3.1.1.
What does CVE-2015-4040 allow attackers to do?
CVE-2015-4040 allows remote authenticated users to exploit a directory traversal vulnerability and potentially access arbitrary files within the web root.
Is CVE-2015-4040 a remote or local vulnerability?
CVE-2015-4040 is classified as a remote vulnerability because it can be exploited by attackers from outside the affected system, provided they have authenticated access.