CVE

Id
56240  
CVE No.
CVE-2012-2997  
Status
Candidate  
Description
XML External Entity (XXE) vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0.0 through 10.2.4 and 11.0.0 through 11.2.1 allows remote authenticated users to read arbitrary files via a crafted XML file.  
Phase
Assigned (20120530)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
584061 56240 CVE-2012-2997 BUGTRAQ:20130122 SEC Consult SA-20130122-0 :: F5 BIG-IP XML External Entity Injection vulnerability  View
584062 56240 CVE-2012-2997 URL:http://archives.neohapsis.com/archives/bugtraq/2013-01/0093.html  View
584063 56240 CVE-2012-2997 MISC:https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-0_F5_BIG-IP_XML_External_Entity_Injection_v10.txt  View
584064 56240 CVE-2012-2997 CONFIRM:http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14138.html  View
584065 56240 CVE-2012-2997 BID:57496  View
584066 56240 CVE-2012-2997 URL:http://www.securityfocus.com/bid/57496  View
584067 56240 CVE-2012-2997 OSVDB:89447  View
584068 56240 CVE-2012-2997 URL:http://osvdb.org/89447  View
584069 56240 CVE-2012-2997 XF:f5bigip-xml-info-disclosure(81426)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29230 JVNDB-2012-004937 複数のネットワークカメラに認証回避の脆弱性 複数のネットワークカメラのウェブインターフェースには、認証回避の脆弱性が存在します。 CVE-2012-3002 56240 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004937.html  View