F5-K95503300: Medium severity f5 big-ip access policy manager vulnerability
Published Feb 1, 2023
·Updated
An open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenticated malicious attacker to build an open redirect URI.
Affected Software
5 affected componentsFixes available
f5 BIG-IP (APM)=17.0.0
17.1.0
f5 BIG-IP (APM)>=16.1.0<=16.1.3
16.1.3.3
f5 BIG-IP (APM)>=15.1.0<=15.1.6
15.1.7
f5 BIG-IP (APM)>=14.1.0<=14.1.5
14.1.5.3
f5 BIG-IP (APM)>=13.1.0<=13.1.5
Event History
Feb 1, 2023
Advisory Published
via F5·01:33 PM
Frequently Asked Questions
1
What is the severity of F5-K95503300?
The severity of F5-K95503300 is critical due to the potential for unauthorized redirection by attackers.
2
How do I fix F5-K95503300?
To fix F5-K95503300, you should upgrade your F5 BIG-IP (APM) to the latest patched version as specified in the advisory.
3
Which versions are affected by F5-K95503300?
F5-K95503300 affects various versions of F5 BIG-IP (APM) including 17.1.0, 16.1.3.3, 15.1.7, and 14.1.5.3.
4
What can an attacker do with F5-K95503300?
An attacker exploiting F5-K95503300 can create malicious open redirect URLs, potentially leading users to phishing sites.
5
Is authentication required to exploit F5-K95503300?
No, F5-K95503300 can be exploited by unauthenticated attackers, increasing its risk.