CVE-2017-15524: Critical severity Kemptechnologies Web Application Firewall vulnerability
Published Dec 18, 2017
·Updated
The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.
Affected Software
1 affected component
Kemptechnologies Web Application Firewall<=7.2.40
Event History
Dec 18, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15524?
CVE-2017-15524 is considered a security feature bypass vulnerability.
2
How do I fix CVE-2017-15524?
To fix CVE-2017-15524, upgrade your Kemp Load Balancer software to version 7.2.40.1 or later.
3
What types of requests can exploit CVE-2017-15524?
CVE-2017-15524 can be exploited via an HTTP POST request.
4
Which products are affected by CVE-2017-15524?
CVE-2017-15524 affects Kemp Web Application Firewall versions prior to 7.2.40.1.
5
Is CVE-2017-15524 a widespread vulnerability?
The impact of CVE-2017-15524 varies among users of Kemp Load Balancers, depending on their specific configurations.