NetSight
IP …
high7.5

CVE-2012-3000

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, E…

Impact

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.

Affected products

VendorProductAffected versions
F5Big-Ip Webaccelerator
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Global Traffic Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Local Traffic Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Protocol Security Module
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Wan Optimization Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Link Controller
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Analytics
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Application Security Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1
F5Big-Ip Access Policy Manager
Versions 11.1.0, 11.2.0, 11.2.1, 11.0.0
F5Big-Ip Edge Gateway
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1

Weakness classification

CWE-89

References