SB2021042905 - Authentication bypass in BIG-IP APM AD

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021042905

SB2021042905 - Authentication bypass in BIG-IP APM AD

Published: April 29, 2021

Security Bulletin ID SB2021042905
CSH Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Authentication (CVE-ID: CVE-2021-23008)

CWE-ID: CWE-287 - Improper Authentication

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber


The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error when processing authentication requests. A remote attacker can bypass authentication process using a spoofed AS-REP (Kerberos Authentication Service Response) response sent over a hijacked KDC (Kerberos Key Distribution Center) connection, or from an AD server compromised by an attacker.

Successful exploitation of the vulnerability may allow an attacker to gain full control over the affected system.


Remediation

Install update from vendor's website.

References