Big Ip

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change.

Published: 2017-05-09T15:00:00.000Z
Updated: 2024-08-06T02:42:11.288Z

In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile.

Published: 2017-05-09T15:00:00.000Z
Updated: 2024-08-06T02:42:11.215Z

In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection.

Published: 2017-05-09T15:00:00.000Z
Updated: 2024-08-06T02:42:11.273Z

In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.

Published: 2017-05-10T14:00:00.000Z
Updated: 2024-08-06T02:42:11.205Z

Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.

Published: 2018-10-08T19:00:00.000Z
Updated: 2024-09-17T01:15:55.297Z