iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 up to and including 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
f5 big-ip application security manager 13.0.0 |
||
f5 big-ip local traffic manager 13.0.0 |
||
f5 big-ip policy enforcement manager 13.0.0 |
||
f5 big-ip application acceleration manager 13.0.0 |
||
f5 big-ip link controller 13.0.0 |
||
f5 big-ip domain name system 13.0.0 |
||
f5 big-ip analytics 12.1.2 |
||
f5 big-ip link controller 12.1.1 |
||
f5 big-ip policy enforcement manager 12.1.2 |
||
f5 big-ip local traffic manager 12.1.1 |
||
f5 big-ip application acceleration manager 12.1.0 |
||
f5 big-ip application acceleration manager 12.1.2 |
||
f5 big-ip websafe 13.0.0 |
||
f5 big-ip websafe 12.1.0 |
||
f5 big-ip websafe 12.1.1 |
||
f5 big-ip websafe 12.1.2 |
||
f5 big-ip policy enforcement manager 12.1.0 |
||
f5 big-ip advanced firewall manager 12.1.1 |
||
f5 big-ip advanced firewall manager 12.1.2 |
||
f5 big-ip access policy manager 12.1.2 |
||
f5 big-ip access policy manager 12.1.1 |
||
f5 big-ip access policy manager 12.1.0 |
||
f5 big-ip domain name system 12.1.0 |
||
f5 big-ip domain name system 12.1.1 |
||
f5 big-ip domain name system 12.1.2 |
||
f5 big-ip analytics 12.1.0 |
||
f5 big-ip local traffic manager 12.1.2 |
||
f5 big-ip application security manager 12.1.0 |
||
f5 big-ip application security manager 12.1.1 |
||
f5 big-ip application security manager 12.1.2 |
||
f5 big-ip advanced firewall manager 13.0.0 |
||
f5 big-ip analytics 13.0.0 |
||
f5 big-ip access policy manager 13.0.0 |
||
f5 big-ip analytics 12.1.1 |
||
f5 big-ip link controller 12.1.0 |
||
f5 big-ip link controller 12.1.2 |
||
f5 big-ip policy enforcement manager 12.1.1 |
||
f5 big-ip local traffic manager 12.1.0 |
||
f5 big-ip application acceleration manager 12.1.1 |
||
f5 big-ip advanced firewall manager 12.1.0 |
Vulmon