CVE-2017-0302: Medium severity f5 access policy manager vulnerability
Published May 9, 2017
·Updated
In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters.
Affected Software
5 affected components
F5 BIG-IP Access Policy Manager=12.0.0
F5 BIG-IP Access Policy Manager=12.1.0
F5 BIG-IP Access Policy Manager=12.1.1
F5 BIG-IP Access Policy Manager=12.1.2
F5 BIG-IP Access Policy Manager=13.0.0
Event History
May 9, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-0302?
CVE-2017-0302 has a medium severity level, which indicates a moderate impact on affected systems.
2
How do I fix CVE-2017-0302?
To mitigate CVE-2017-0302, upgrade to a fixed version of F5 BIG-IP APM beyond 12.1.2 or 13.0.0.
3
What versions of F5 BIG-IP APM are affected by CVE-2017-0302?
F5 BIG-IP APM versions 12.0.0 through 12.1.2 and 13.0.0 are affected by CVE-2017-0302.
4
What type of attack does CVE-2017-0302 represent?
CVE-2017-0302 represents a traffic disruption vulnerability that can be exploited by authenticated users.
5
Can CVE-2017-0302 be exploited remotely?
CVE-2017-0302 requires an authenticated user with an established session, making it not exploitable remotely without access.