F5-K000140963: High severity f5 big-ip and big-iq centralized management vulnerability
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000140963?
The severity of F5-K000140963 is considered high due to the potential for an attacker to exploit the improper link resolution flaw.
How do I fix F5-K000140963?
To fix F5-K000140963, users should upgrade to the patched versions of F5 BIG-IP, BIG-IQ Centralized Management, or Traffix SDC as recommended in the security advisory.
What systems are affected by F5-K000140963?
F5-K000140963 affects specific versions of F5 BIG-IP, BIG-IQ Centralized Management, and Traffix Systems Signaling Delivery Controller.
What type of vulnerability is F5-K000140963?
F5-K000140963 is classified as an improper link resolution vulnerability that can allow unauthorized changes to files outside of the archive.
What is the potential impact of F5-K000140963?
The potential impact of F5-K000140963 includes permission changes, malicious access control modifications, and unauthorized file alterations.