F5-K000135921: Medium severity F5 BIG-IP vulnerability

Q: What is the severity of F5-K000135921?

F5-K000135921 is classified as a medium severity vulnerability due to its potential to allow attackers to bypass security controls.

Q: How do I fix F5-K000135921?

To remediate F5-K000135921, upgrade to the patched versions specified in the advisory for affected F5 BIG-IP and F5OS products.

Q: What products are affected by F5-K000135921?

F5-K000135921 affects multiple versions of F5 BIG-IP, BIG-IQ, and F5OS products as detailed in the vulnerability report.

Q: Can F5-K000135921 lead to data breaches?

Yes, F5-K000135921 can potentially lead to data breaches if exploited, as it allows attackers to bypass blocklisting measures.

Q: Is there a workaround for F5-K000135921?

Currently, the most effective measure against F5-K000135921 is to update the affected F5 products to their recommended versions.

Published Aug 21, 2023

Updated

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Affected Software

10 affected componentsFixes available

F5 BIG-IP=17.5.0, >=17.1.0<=17.1.2

17.5.117.1.3

F5 BIG-IP>=16.1.0<=16.1.6

F5 BIG-IP>=15.1.0<=15.1.10

F5 BIG-IP>=14.1.0<=14.1.5

F5 BIG-IP>=13.1.0<=13.1.5

F5 BIG-IP Next CNF=1.1.0

F5 BIG-IP Next SPK>=1.5.0<=1.8.0

F5 BIG-IQ Centralized Management>=8.0.0<=8.4.0

8.4.1

F5 F5OS-A>=1.5.0<=1.5.1, =1.4.0, >=1.3.0<=1.3.2

1.7.0

F5 F5OS-C>=1.5.0<=1.5.1

Event History

Aug 21, 2023

Advisory Published

via F5·10:17 PM

Frequently Asked Questions

What is the severity of F5-K000135921?

F5-K000135921 is classified as a medium severity vulnerability due to its potential to allow attackers to bypass security controls.

How do I fix F5-K000135921?

To remediate F5-K000135921, upgrade to the patched versions specified in the advisory for affected F5 BIG-IP and F5OS products.

What products are affected by F5-K000135921?