F5-K000139901: Low severity f5 big-ip and big-iq centralized management vulnerability
In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000139901?
F5-K000139901 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix F5-K000139901?
To fix F5-K000139901, upgrade PyYAML to version 5.1 or later to avoid using the insecure yaml.load() function.
Which products are affected by F5-K000139901?
F5-K000139901 affects specific versions of F5 BIG-IP and F5 BIG-IQ Centralized Management.
What impact does F5-K000139901 have on my system?
F5-K000139901 can lead to arbitrary code execution if untrusted data is processed using the compromised yaml.load() function.
Is there a workaround for F5-K000139901?
As a workaround for F5-K000139901, avoid using the yaml.load() function with untrusted data and consider using 'SafeLoader' or upgrading to a secure version.