On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
f5 big-ip application acceleration manager |
||
f5 big-ip application acceleration manager 13.0.0 |