AskF5 Knowledge Base

Applies To:

Show Versions Show Versions
sol11795: Pre-logon sequence vulnerability to Cross-Site Scripting
Security AdvisorySecurity Advisory

Original Publication Date: 07/08/2010
Updated Date: 05/11/2011

Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to SOL4602: Overview of F5 security vulnerability response policy.

F5 products and versions that have been evaluated for this Security Advisory

Product Affected Not Affected
BIG-IP LTM None 9.x
10.x
BIG-IP GTM None 9.x
10.x
BIG-IP ASM None 9.x
10.x
BIG-IP Link Controller None 9.x
10.x
BIG-IP WebAccelerator None 9.x
10.x
BIG-IP PSM None 9.x
10.x
BIG-IP WAN Optimization None 10.x
BIG-IP APM None 10.x
BIG-IP Edge Gateway None 10.x
BIG-IP SAM None 8.0
FirePass

5.x
6.x

 7.x
Enterprise Manager None

1.x
2.x
WANJet None

4.x
5.x
WebAccelerator None 5.x
ARX None 2.x
3.x
4.x
5.x

Vulnerability description and product information

Cross-site scripting (XSS) vulnerabilities exist in the FirePass pre-logon pages, which are accessible prior to authentication. The affected FirePass pages fail to fully sanitize HTTP request input before the web page content is sent to the browser. By altering the HTTP request input via the posted data, a remote attacker can potentially compromise the security of the FirePass controller.

It is possible for a remote attacker to create web pages, emails, or other media containing hyperlinks to the vulnerable FirePass web page. These hyperlinks may include executable code or other malicious data. Following one of these hyperlinks to the FirePass controller could result in malicious code execution on the client side, disclosure of sensitive information, or other exploits.

F5 Product Development tracked this issue as CR141911 and CR142333 and it was fixed in FirePass 7.0.0. For information about upgrading, refer to the FirePass release notes.
 
Additionally, this issue was fixed in cumulative hotfix HF-610-3-1 issued for FirePass version 6.1.0 and hotfix-116015-142333 for FirePass version 5.5.2. You may download this hotfix or later versions of the hotfix from the F5 Downloads site.
 
For instructions about obtaining a hotfix, refer to SOL167: Downloading software from F5.
 
For instructions about installing a hotfix, refer to SOL3430: Installing FirePass hotfixes.

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)