ID de Prueba:	1.3.6.1.4.1.25623.1.0.140053
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - Configuration utility CSRF vulnerability
Resumen:	When an authenticated Configuration utility user visits a specially crafted web page, the user's current session can be logged out and unknowingly logged in to the Configuration utility using a different user account.
Descripción:	Summary: When an authenticated Configuration utility user visits a specially crafted web page, the user's current session can be logged out and unknowingly logged in to the Configuration utility using a different user account. Vulnerability Impact: When exploited, the authenticated Configuration utility user's login session is replaced by another user account without the targeted user's knowledge. To exploit this cross-site request forgery (CSRF) vulnerability, an attacker must already know the login credentials of a legitimate Configuration utility user account. Solution: See the referenced vendor advisory for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.