critical9.9
CVE-2021-23031
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an aut…
Impact
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Advanced Web Application Firewall | from 11.6.1 through 11.6.5.2 from 12.1.0 through 12.1.5 from 13.1.0 through 13.1.3 from 14.1.0 through 14.1.4 from 15.1.0 through 15.1.2 from 16.0.0 through 16.0.1.1 |
| F5 | Big-Ip Application Security Manager | from 11.6.1 through 11.6.5.2 from 12.1.0 through 12.1.5 from 13.1.0 through 13.1.3 from 14.1.0 through 14.1.4 from 15.1.0 through 15.1.2 from 16.0.0 through 16.0.1.1 |