F5-K000137365: SQL Injection
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.1.1.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.1.4.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.1.10.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.1.5.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.1.5.1
Event History
Frequently Asked Questions
What is the severity of F5-K000137365?
The vulnerability F5-K000137365 is classified as a high severity authenticated SQL injection vulnerability.
How do I fix F5-K000137365?
To remediate F5-K000137365, upgrade to the appropriate patched versions of the BIG-IP software, specifically the versions listed in the advisory.
Which products are affected by F5-K000137365?
F5-K000137365 affects multiple versions of the F5 BIG-IP product, including versions 17.1.x, 16.1.x, 15.1.x, 14.1.x, and 13.1.x.
Is F5-K000137365 an authenticated vulnerability?
Yes, F5-K000137365 requires authenticated access to exploit the SQL injection vulnerability.
What impact does F5-K000137365 have on my system?
Exploitation of F5-K000137365 could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access to sensitive data.