F5-K000138047: SQL Injection
Published Feb 14, 2024
·Updated
A SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility.
Affected Software
3 affected componentsFixes available
F5 BIG-IP (Advanced WAF/ASM)=17.1.0
17.1.1
F5 BIG-IP (Advanced WAF/ASM)>=16.1.0<=16.1.3
16.1.4
F5 BIG-IP (Advanced WAF/ASM)>=15.1.0<=15.1.9
15.1.10
Event History
Feb 14, 2024
Advisory Published
via F5·01:30 PM
Data Sourced
via F5·01:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of F5-K000138047?
The severity of F5-K000138047 is high due to the potential for unauthorized access through SQL injection.
2
How do I fix F5-K000138047?
To fix F5-K000138047, update your F5 BIG-IP Advanced WAF/ASM to the latest patched version as recommended in the advisory.
3
What software versions are affected by F5-K000138047?
F5-K000138047 affects specific versions of F5 BIG-IP Advanced WAF/ASM, including 17.1.0, 16.1.0 to 16.1.3, and 15.1.0 to 15.1.9.
4
Is there a workaround for F5-K000138047?
Currently, there is no official workaround to mitigate the vulnerability identified in F5-K000138047 outside of applying the software updates.
5
How can I determine if my system is impacted by F5-K000138047?
You can determine if your system is impacted by F5-K000138047 by checking your F5 BIG-IP version against the affected versions listed in the advisory.