Month: febrero 2021

Intel Multiple CPU vulnerabilities CVE-2020-8738,CVE-2020-8739,CVE-2020-8740,CVE-2020-8764 Security Advisory Security Advisory Description CVE-2020-8738 Improper conditions check in Intel BIOS ... More info: https://support.f5.com/csp/article/K30340506?utm_source=f5support&utm_medium=RSS

Intel QAT vulnerability CVE-2020-12333 Security Advisory Security Advisory Description Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an ... More info: https://support.f5.com/csp/article/K30857274?utm_source=f5support&utm_medium=RSS

On December 17, 2020, our Threat Intelligence team responsibly disclosed three vulnerabilities in Responsive Menu, a WordPress plugin installed on over 100,000 sites. The first flaw made it possible for authenticated attackers with low-level permissions to upload arbitrary files and ultimately achieve remote code execution. The remaining two flaws made it possible for attackers to […] More info: https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/

Today, we’re thrilled to announce the first release of WP Activity Log for 2021, update 4.2. Your WP Activity Log experience is improving as we work to address bugs and release new features. With this update, the plugin and all its modules have been updated to support any type of date and time format that […] More info: https://wpactivitylog.com/wsal-4-2-0/

BIG-IP ASM Bot Defense open redirection vulnerability CVE-2021-22984 Security Advisory Security Advisory Description When receiving a unauthenticated client request with a maliciously crafted URI, ... More info: https://support.f5.com/csp/article/K33440533?utm_source=f5support&utm_medium=RSS

BIG-IP APM vulnerability CVE-2021-22985 Security Advisory Security Advisory Description Under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory. A malicious, ... More info: https://support.f5.com/csp/article/K32049501?utm_source=f5support&utm_medium=RSS

iControl REST vulnerability CVE-2021-22974 Security Advisory Security Advisory Description An authenticated attacker with access to iControl REST over the control plane may be able to take ... More info: https://support.f5.com/csp/article/K68652018?utm_source=f5support&utm_medium=RSS

big3d agent vulnerability CVE-2021-22982 Security Advisory Security Advisory Description big3d does not securely handle and parse certain payloads resulting in a buffer overflow. (CVE-2021-22982) More info: https://support.f5.com/csp/article/K72708443?utm_source=f5support&utm_medium=RSS

The BIG-IP ASM system may not properly perform signature checks on cookies Security Advisory Security Advisory Description The BIG-IP ASM system may not properly perform signature checks on cookies. More info: https://support.f5.com/csp/article/K88162221?utm_source=f5support&utm_medium=RSS

iRules LX vulnerability CVE-2021-22973 Security Advisory Security Advisory Description JSON parser function does not protect against out-of-bounds memory accesses or writes. (CVE-2021-22973) Impact More info: https://support.f5.com/csp/article/K13323323?utm_source=f5support&utm_medium=RSS