Last Modified: Jan 22, 2021
Affected Product:
See more info
BIG-IP ASM
Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1
Fixed In:
16.0.0, 14.1.2.5
Opened: Feb 19, 2020
Severity: 3-Major
Live Update modifications are allowed for Application Security Editor Role.
Application Security Editor Role role is permitted to update Attack Signatures when it shouldn't be.
Login as Application Security Editor user and try to install ASU.
None
None