Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:52:20 +0000 certfr-2018-avi-182 — De multiples vulnérabilités ont été découvertes dans F5 BIG-IP. Certaines d'entre elles permettent à un attaquant de pr… https://cve.radiocsirt.org/vuln/certfr-2018-avi-182 certfr-2018-avi-182 https://cve.radiocsirt.org/vuln/certfr-2018-avi-182 cnvd-2018-09409 https://cve.radiocsirt.org/vuln/cnvd-2018-09409 cnvd-2018-09409 https://cve.radiocsirt.org/vuln/cnvd-2018-09409 EUVD-2026-169368 https://cve.radiocsirt.org/vuln/euvd-2026-169368 EUVD-2026-169368 https://cve.radiocsirt.org/vuln/euvd-2026-169368 fkie_cve-2018-5506 https://cve.radiocsirt.org/vuln/fkie_cve-2018-5506 <p>In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.</p> <p>In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-5506 GHSA-cv35-357j-grvj https://cve.radiocsirt.org/vuln/ghsa-cv35-357j-grvj <p>In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.</p> <p>In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.</p> https://cve.radiocsirt.org/vuln/ghsa-cv35-357j-grvj gsd-2018-5506 https://cve.radiocsirt.org/vuln/gsd-2018-5506 gsd-2018-5506 https://cve.radiocsirt.org/vuln/gsd-2018-5506