NVD

Id
28371  
Name
CVE-2015-8022  
Description
The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF16 and 11.3.0; and BIG-IP PSM 11.x before 11.2.1 HF16, 11.3.x, and 11.4.x before 11.4.1 HF10 allows remote authenticated users with certain permissions to gain privileges by leveraging an Access Policy Manager customization configuration section that allows file uploads.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-08-19  
Modified Date
2016-08-22  
Seq
2015-8022  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149143 28371 CVE-2015-8022 1036627  View
149144 28371 CVE-2015-8022 https://support.f5.com/kb/en-us/solutions/public/k/12/sol12401251.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11910 JVNDB-2015-007230 複数の F5 製品の Configuration ユーティリティにおける権限を取得される脆弱性 複数の F5 製品の Configuration ユーティリティには、権限を取得される脆弱性が存在します。 CVE-2015-8022 85247 CVE-2015-8022 28371 8.5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007230.html 2015-10-28 2016-08-23 View