NetSight
IP …
critical9.3

CVE-2013-0150

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through …

Impact

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.

Affected products

VendorProductAffected versions
F5Big-Ip Access Policy Manager
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Advanced Firewall Manager
Version 11.3.0
F5Big-Ip Analytics
from 11.0.0 through 11.3.0
F5Big-Ip Application Security Manager
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Edge Gateway
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Global Traffic Manager
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Link Controller
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Local Traffic Manager
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Policy Enforcement Manager
Version 11.3.0
F5Big-Ip Protocol Security Module
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Wan Optimization Manager
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0
F5Big-Ip Webaccelerator
from 10.1.0 through 10.2.4
from 11.0.0 through 11.3.0

Weakness classification

CWE-22

References