製品・ソフトウェアに関する情報
Vulnerability Search
BIG-IP における脆弱性
Title BIG-IP における脆弱性
Summary

BIG-IP には、不特定の脆弱性が存在します。

Possible impacts 情報を取得される、および情報を改ざんされる可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date Feb. 11, 2021, midnight
Registration Date Nov. 4, 2021, 5:52 p.m.
Last Update Nov. 4, 2021, 5:52 p.m.
CVSS3.0 : 警告
Score 4.8
Vector CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS2.0 : 警告
Score 5.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected System
F5 Networks
BIG-IP Access Policy Manager (APM) 11.6.x
BIG-IP Access Policy Manager (APM) 12.1.x
BIG-IP Advanced Firewall Manager (AFM) 11.6.x
BIG-IP Advanced Firewall Manager (AFM) 12.1.x
BIG-IP Advanced Web Application Firewall (WAF) 11.6.x
BIG-IP Advanced Web Application Firewall (WAF) 12.1.x
BIG-IP Analytics 11.6.x
BIG-IP Analytics 12.1.x
BIG-IP Application Acceleration Manager (AAM) 11.6.x
BIG-IP Application Acceleration Manager (AAM) 12.1.x
BIG-IP Application Security Manager (ASM) 11.6.x
BIG-IP Application Security Manager (ASM) 12.1.x
BIG-IP DDoS Hybrid Defender 11.6.x
BIG-IP DDoS Hybrid Defender 12.1.x
BIG-IP Domain Name System (DNS) 11.6.x
BIG-IP Domain Name System (DNS) 12.1.x
BIG-IP Fraud Protection Service (FPS) 11.6.x
BIG-IP Fraud Protection Service (FPS) 12.1.x
BIG-IP Global Traffic Manager (GTM) 11.6.x
BIG-IP Global Traffic Manager (GTM) 12.1.x
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
1 [2021年11月04日]
  掲載		 Nov. 4, 2021, 5:52 p.m.
NVD Vulnerability Information
CVE-2021-22981
Summary

On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that is mitigated by the Extended Master Secret (EMS) extension defined in RFC 7627. TLS connections that do not use EMS are vulnerable to man-in-the-middle attacks during renegotiation. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Publication Date Feb. 13, 2021, 3:15 a.m.
Registration Date Feb. 13, 2021, 10:02 a.m.
Last Update Nov. 21, 2024, 2:51 p.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* 12.1.0 12.1.5
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* 11.6.1 11.6.5
cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* 12.1.0 12.1.5
Related information, measures and tools
Common Vulnerabilities List