CVE:CVE-2012-1493
CNNVD:CNNVD-201206-137
F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的多合一网络设备。
多个F5产品中存在安全漏洞，该漏洞源于未明配置错误。恶意人员可利用该漏洞操控受影响系统。该漏洞影响以下产品及版本：BIG-IP LTM 9.x，10.x和11.x版本；BIG-IP GTM 9.x，10.x和11.x版本；BIG-IP ASM 9.x，10.x和11.x版本；BIG-IP Link Controller 9.x，10.x和11.x版本；BIG-IP PSM 9.x，10.x和11.x版本；BIG-IP WOM 10.x和11.x版本；BIG-IP APM 10.x和11.x版本；BIG-IP Edge Gateway 10.x和11.x版本；BIG-IP Analytics 11.x版本；Enterprise Manager 1.x和2.x版本。
solution:Upgrade f5 big-ip_application_security_manager to a higher version than 9.2.0,9.2.0:hf4,9.4.4,9.4.5,9.4.6,9.4.7,9.4.8,10.0.0,10.0.1,10.2.3:hf1,11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,and avoid the version 9.2.0,9.2.0:hf4,9.4.4,9.4.5,9.4.6,9.4.7,9.4.8,10.0.0,10.0.1,10.2.3:hf1,11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2; Upgrade f5 big-ip_global_traffic_manager to a higher version than *,9.2.2,9.4.8:hf4,10.0.0,10.2.3:hf1,11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,and avoid the version 9.2.2,9.4.8:hf4,10.0.0,10.2.3:hf1,11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2; Upgrade f5 big-ip_local_traffic_manager to a higher version than *,9.0.0,9.4.8:hf4,10.0.0,10.2.3:hf1,11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,and avoid the version 9.0.0,9.4.8:hf4,10.0.0,10.2.3:hf1,11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2; Upgrade f5 tmos to a higher version than *,2.0,4.0,4.2,4.3,4.4,4.5,4.5.6,4.5.9,4.5.10,4.5.11,4.5.12,4.6,4.6.2,9.0,9.0.1,9.0.2,9.0.3,9.0.4,9.0.5,9.1,9.1.1,9.1.2,9.1.3,9.2,9.2.2,9.2.3,9.2.4,9.2.5,9.3,9.3.1,9.4,9.4.1,9.4.2,9.4.3,9.4.4,9.4.5,9.4.6,9.4.7,9.4.8,9.6.0,9.6.1,10.0.0,10.0.1,10.1.0,10.2.0,and avoid the version 2.0,4.0,4.2,4.3,4.4,4.5,4.5.6,4.5.9,4.5.10,4.5.11,4.5.12,4.6,4.6.2,9.0,9.0.1,9.0.2,9.0.3,9.0.4,9.0.5,9.1,9.1.1,9.1.2,9.1.3,9.2,9.2.2,9.2.3,9.2.4,9.2.5,9.3,9.3.1,9.4,9.4.1,9.4.2,9.4.3,9.4.4,9.4.5,9.4.6,9.4.7,9.4.8,9.6.0,9.6.1,10.0.0,10.0.1,10.1.0,10.2.0; Upgrade f5 big-ip_1000 to a higher version than *; Upgrade f5 big-ip_11000 to a higher version than *; Upgrade f5 big-ip_11050 to a higher version than *; Upgrade f5 big-ip_1500 to a higher version than *; Upgrade f5 big-ip_1600 to a higher version than *; Upgrade f5 big-ip_2400 to a higher version than *; Upgrade f5 big-ip_3400 to a higher version than *; Upgrade f5 big-ip_3410 to a higher version than *; Upgrade f5 big-ip_3600 to a higher version than *; Upgrade f5 big-ip_3900 to a higher version than *; Upgrade f5 big-ip_4100 to a higher version than *; Upgrade f5 big-ip_5100 to a higher version than *; Upgrade f5 big-ip_5110 to a higher version than *; Upgrade f5 big-ip_6400 to a higher version than *; Upgrade f5 big-ip_6800 to a higher version than *; Upgrade f5 big-ip_6900 to a higher version than *; Upgrade f5 big-ip_8400 to a higher version than *; Upgrade f5 big-ip_8800 to a higher version than *; Upgrade f5 big-ip_8900 to a higher version than *; Upgrade f5 big-ip_8950 to a higher version than *; Upgrade f5 enterprise_manager to a higher version than *,1.0,2.0,2.1.0,2.1.0:hf1,2.2.0,2.3.0,2.3.0:hf2,and avoid the version 1.0,2.0,2.1.0,2.1.0:hf1,2.2.0,2.3.0,2.3.0:hf2