Vulnerability CVE-2012-3000 - CERT Civis.Net

Vulnerability Name:

CVE-2012-3000 (CCN-81457)

Assigned:

2012-05-30

Published:

2013-01-22

Updated:

2017-08-29

Summary:

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Data Manipulation

References:

Source: BUGTRAQ
Type: UNKNOWN
20130122 SEC Consult SA-20130122-1 :: F5 BIG-IP SQL injection vulnerability

Source: MITRE
Type: CNA
CVE-2012-3000

Source: OSVDB
Type: UNKNOWN
89446

Source: MISC
Type: UNKNOWN
http://packetstormsecurity.com/files/119739/F5-BIG-IP-11.2.0-SQL-Injection.html

Source: CCN
Type: SA51867
F5 Products "defaultQuery" SQL Injection Vulnerability

Source: SECUNIA
Type: Vendor Advisory
51867

Source: CONFIRM
Type: UNKNOWN
http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14154.html

Source: CCN
Type: F5 Web Site
F5 BIG-IP

Source: BID
Type: UNKNOWN
57500

Source: CCN
Type: BID-57500
F5 BIG-IP CVE-2012-3000 SQL Injection Vulnerability

Source: XF
Type: UNKNOWN
f5bigip-sql-injection(81457)

Source: XF
Type: UNKNOWN
f5bigip-sql-injection(81457)

Source: CCN
Type: Packet Storm Web site
F5 BIG-IP 11.2.0 SQL Injection

Source: MISC
Type: UNKNOWN
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130122-1_F5_BIG-IP_SQL_Injection_v10.txt

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:big-ip_webaccelerator:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*

Configuration 2:

cpe:/a:f5:big-ip_global_traffic_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.0.0:hf1:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.1.0:hf2:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*

Configuration 3:

cpe:/a:f5:big-ip_local_traffic_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.0.0:hf1:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.1.0:hf2:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*

Configuration 4:

cpe:/a:f5:big-ip_protocol_security_module:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:*

Configuration 5:

cpe:/a:f5:big-ip_wan_optimization_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:*

Configuration 6:

cpe:/a:f5:big-ip_link_controller:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*

Configuration 7:

cpe:/a:f5:big-ip_analytics:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*

Configuration 8:

cpe:/a:f5:big-ip_application_security_manager:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.0.0:hf1:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.1.0:hf2:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*

Configuration 9:

cpe:/a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*

OR cpe:/h:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:standalone

OR cpe:/h:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:standalone

OR cpe:/h:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:standalone

OR cpe:/h:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:standalone

Configuration 10:

cpe:/a:f5:big-ip_edge_gateway:11.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*

Denotes that component is vulnerable