ID de Prueba:	1.3.6.1.4.1.25623.1.0.105375
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - privilege escalation vulnerability CVE-2014-3220
Resumen:	The remote host is missing a security patch.
Descripción:	Summary: The remote host is missing a security patch. Vulnerability Insight: F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/authz/users/. (CVE-2014-3220) Vulnerability Impact: An authenticated user with limited access may be able to gain administrative access to the system. Solution: See the referenced vendor advisory for a solution. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2937 Common Vulnerability Exposure (CVE) ID: CVE-2014-3220 BugTraq ID: 67191 http://www.securityfocus.com/bid/67191 BugTraq ID: 67227 http://www.securityfocus.com/bid/67227 http://www.exploit-db.com/exploits/33143 http://seclists.org/fulldisclosure/2014/May/10 http://seclists.org/fulldisclosure/2014/May/11 http://seclists.org/fulldisclosure/2014/May/16 http://volatile-minds.blogspot.com/2014/05/f5-big-iq-v41020130-authenticated.html https://gist.github.com/brandonprry/2e73acd63094fa2a4f63 http://secunia.com/advisories/58440
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.