CVE-2008-6474

EPSS 0.48%
Veröffentlicht 16.03.2009 16:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

F5 ≫ Tmos Version9.4.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.48%	0.642

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://osvdb.org/51116

http://www.securityfocus.com/archive/1/490496/100/0/threaded

http://www.securityfocus.com/bid/28639

https://exchange.xforce.ibmcloud.com/vulnerabilities/49308

https://nvd.nist.gov/vuln/detail/CVE-2008-6474

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-6474

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-6474

EUVD