← back
CVE-2008-7032

CVE-2008-7032

EPSS 2.4%
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/31133unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/50985https://exchange.xforce.ibmcloud.com/vulnerabilities/40419http://www.securityfocus.com/archive/1/487862/100/200/threadedhttp://www.securityfocus.com/archive/1/487863/100/200/threadedhttp://www.securityfocus.com/bid/27720