F5OS - Chassis vulnerabilities
5 known vulnerabilities in F5OS - Chassis from F5. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
F5OS - Appliance: Execution with Unnecessary Privileges
A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached End
- 8.8 High severity
F5OS - Appliance: Improper Neutralization of Directives in Dynamically Evaluated Code
A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached En
- 7.5 High severity
F5OS - Chassis: Allocation of Resources Without Limits or Throttling
When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- 8.8 High severity
F5OS - Appliance: Incorrect Authorization
On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- 8.1 High severity
F5OS - Appliance: Incorrect Authorization
On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability t