Latest f5 iworkflow Vulnerabilities

● CVE-2020-5854
On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specif...
F5 BIG-IP Access Policy Manager>=11.5.2<=11.6.5
F5 BIG-IP Access Policy Manager>=12.1.0<12.1.5.1
F5 BIG-IP Access Policy Manager>=13.1.0<13.1.3.2
F5 BIG-IP Access Policy Manager>=14.0.0<14.0.1.1
F5 BIG-IP Access Policy Manager>=14.1.0<14.1.2.1
F5 BIG-IP Access Policy Manager>=15.0.0<15.1.0
and 78 more
● CVE-2014-5209
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
NTP ntp=4.2.7-p25
F5 BIG-IP Access Policy Manager>=10.2.1<=10.2.4
F5 BIG-IP Access Policy Manager>=11.4.0<=11.6.4
F5 BIG-IP Access Policy Manager>=12.0.0<=12.1.4
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1
F5 BIG-IP Access Policy Manager>=14.0.0<=14.1.0
and 71 more
● CVE-2019-19151
On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Man...
F5 BIG-IQ Centralized Management>=5.0.0<=5.4.0
F5 BIG-IQ Centralized Management>=6.0.0<=6.1.0
F5 BIG-IQ Centralized Management=7.0.0
F5 BIG-IP Access Policy Manager>=11.5.1<=11.6.5
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.5
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.3
and 64 more
● CVE-2019-6665
On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device commu...
F5 BIG-IP Application Security Manager>=13.1.0<=13.1.3.1
F5 BIG-IP Application Security Manager>=14.0.0<=14.0.1
F5 BIG-IP Application Security Manager>=14.1.0<=14.1.2
F5 BIG-IP Application Security Manager>=15.0.0<=15.0.1
F5 BIG-IQ Centralized Management>=5.2.0<=5.4.0
F5 BIG-IQ Centralized Management=6.0.0
and 2 more
● CVE-2019-6663
F5 BIG-IP Access Policy Manager>=11.5.2<=11.6.5
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.5
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.3
F5 BIG-IP Access Policy Manager>=14.0.0<=14.1.2
F5 BIG-IP Access Policy Manager>=15.0.0<=15.0.1
F5 BIG-IP Advanced Firewall Manager>=11.5.2<=11.6.5
and 64 more
● CVE-2019-6471
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12...
F5 Big-ip Local Traffic Manager>=11.5.2<=11.5.9
F5 Big-ip Local Traffic Manager>=11.6.1<=11.6.4
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.4
F5 Big-ip Local Traffic Manager>=13.1.0<=13.1.1
F5 Big-ip Local Traffic Manager=14.0.0
F5 Big-ip Local Traffic Manager=14.1.0
and 103 more
● CVE-2018-5743
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conserva...
F5 Big-ip Local Traffic Manager>=11.5.2<=11.6.5
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.4
F5 Big-ip Local Traffic Manager>=13.0.0<=13.1.1
F5 Big-ip Local Traffic Manager>=14.0.0<=14.1.0
F5 Big-ip Local Traffic Manager=15.0.0
F5 Big-ip Application Acceleration Manager>=11.5.2<=11.6.5
and 73 more
● CVE-2018-14880
tcpdump. Multiple issues were addressed by updating to tcpdump version 4.9.3 and libpcap version 1.9.1
Apple macOS Catalina<10.15.2
Apple Mojave
Apple High Sierra
ubuntu/tcpdump<4.9.3-0ubuntu0.18.04.1
ubuntu/tcpdump<4.9.3-0ubuntu0.14.04.1+
ubuntu/tcpdump<4.9.3
and 85 more
● CVE-2018-14468
tcpdump. Multiple issues were addressed by updating to tcpdump version 4.9.3 and libpcap version 1.9.1
Apple macOS Catalina<10.15.2
Apple Mojave
Apple High Sierra
ubuntu/tcpdump<4.9.3-0ubuntu0.18.04.1
ubuntu/tcpdump<4.9.3-0ubuntu0.14.04.1+
ubuntu/tcpdump<4.9.3
and 85 more
● CVE-2019-6651
In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configura...
F5 Big-ip Local Traffic Manager>=11.5.1<=11.6.4
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.4.1
F5 Big-ip Local Traffic Manager>=13.0.0<=13.1.1.5
F5 Big-ip Local Traffic Manager>=14.0.0<=14.0.0.5
F5 Big-ip Local Traffic Manager>=14.1.0<=14.1.0.6
F5 Big-ip Local Traffic Manager=15.0.0
and 77 more
● CVE-2019-10744
A Prototype Pollution vulnerability was found in lodash. Calling certain methods with untrusted JSON could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON...
redhat/jaeger<0:v1.13.1.redhat7-1.el7
redhat/kiali<0:v1.0.11.redhat1-1.el7
redhat/servicemesh-grafana<0:6.2.2-36.el8
redhat/ovirt-web-ui<0:1.6.0-1.el7e
redhat/lodash<4.17.12
npm/lodash.defaultsdeep<4.6.1
and 84 more
● CVE-2019-6642
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ...
F5 BIG-IP Access Policy Manager>=11.5.2<=11.6.4
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.4.2
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1.5
F5 BIG-IP Access Policy Manager>=14.0.0<=14.1.0.5
F5 BIG-IP Access Policy Manager=15.0.0
F5 BIG-IP Advanced Firewall Manager>=11.5.2<=11.6.4
and 63 more
● CVE-2019-11479
An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP segments. If the Maximum Segment Size (MSS) of a TCP connection was set to low values,...
redhat/kernel<0:2.6.32-754.15.3.el6
redhat/kernel<0:2.6.32-431.95.3.el6
redhat/kernel<0:2.6.32-504.79.3.el6
redhat/kernel-rt<0:3.10.0-957.21.3.rt56.935.el7
redhat/kernel<0:3.10.0-957.21.3.el7
redhat/kernel-alt<0:4.14.0-115.8.2.el7a
and 180 more
● CVE-2018-15328
On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used for authentication a...
F5 BIG-IP Access Policy Manager>=11.2.1<=11.6.3
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.3
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1
F5 BIG-IP Access Policy Manager=14.0.0
F5 BIG-IP Advanced Firewall Manager>=11.2.1<=11.6.3
F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.3
and 51 more
● CVE-2018-15321
When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2....
F5 Big-ip Local Traffic Manager>=11.2.1<=11.5.6
F5 Big-ip Local Traffic Manager>=11.6.0<=11.6.3.2
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.3.5
F5 Big-ip Local Traffic Manager>=13.0.0<=13.1.0.7
F5 Big-ip Local Traffic Manager>=14.0.0<=14.0.0.2
F5 BIG-IP Advanced Firewall Manager>=11.2.1<=11.5.6
and 64 more
● CVE-2018-15322
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, i...
F5 Big-ip Local Traffic Manager>=11.2.1<=11.5.6
F5 Big-ip Local Traffic Manager>=11.6.0<=11.6.3.2
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.3.5
F5 Big-ip Local Traffic Manager>=13.0.0<=13.1.0.7
F5 Big-ip Local Traffic Manager>=14.0.0<=14.0.0.2
F5 BIG-IP Advanced Firewall Manager>=11.2.1<=11.5.6
and 65 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203