NetSight
IP …
medium4.0Public exploit code

CVE-2015-4040

Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticate…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.

Affected products

VendorProductAffected versions
F5Enterprise Manager
Versions 3.0.0, 3.1.0, 3.1.1
F5Big-Ip Access Policy Manager
through 11.6.0
F5Big-Ip Advanced Firewall Manager
through 11.6.0
F5Big-Ip Analytics
through 11.6.0
F5Big-Ip Application Acceleration Manager
through 11.6.0
F5Big-Ip Application Security Manager
through 11.6.0
F5Big-Ip Edge Gateway
through 11.3.0
F5Big-Ip Global Traffic Manager
through 11.3.0
F5Big-Ip Link Controller
through 11.3.0
F5Big-Ip Local Traffic Manager
through 11.6.0
F5Big-Ip Policy Enforcement Manager
through 11.3.0
F5Big-Ip Protocol Security Module
through 11.3.0

Weakness classification

CWE-22

References