Denial of service in Apache Tomcat component in F5 Traffix SDC

Published: 2021-03-16

Risk	Medium
Patch available	NO
Number of vulnerabilities	1
CVE-ID	CVE-2021-25122
CWE-ID	CWE-399
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Traffix SDC Client/Desktop applications / Software for system administration
Vendor	F5 Networks

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Resource management error

EUVDB-ID: #VU51014

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-25122

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to improper management of internal resources within the application when processing new h2c connection requests. A remote attacker can send specially crafted requests to the server and obtain contents of HTTP responses, served to other users.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Traffix SDC: 5.1.0 - 5.1.0 CF 22

External links

http://support.f5.com/csp/article/K00174195

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.