Tracker / CVE-2012-3000
CVE-2012-3000
High 7.5
Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.
Affected products and versions
| f5 | big-ip_access_policy_manager |
|---|---|
| f5 | big-ip_analytics |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_edge_gateway |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_link_controller |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_protocol_security_module |
| f5 | big-ip_wan_optimization_manager |
| f5 | big-ip_webaccelerator |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.