SB2019082903 - Security restrictions bypass in F5 Networks BIG-IP

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019082903

SB2019082903 - Security restrictions bypass in F5 Networks BIG-IP

Published: August 29, 2019

Security Bulletin ID SB2019082903
Severity
Medium
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Input validation error (CVE-ID: N/A)

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when processing HTTP requests. A remote attacker can send specially crafted HTTP request that contains Content-Length and Transfer-Encoding headers and make the BIG-IP system to pass malformed HTTP requests to a target pool member webserver. As a result, an attacker might be able to perform HTTP Request Smuggling attack and influence the protected web application.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References