Vulnerability · Published Sep 14, 2021 · Assigned by f5
CVE-2021-23053
Medium 5.3
In plain English
A medium-severity uncontrolled resource consumption in BIG-IP Advanced WAF and BIG-IP ASM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Official description
On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BIG-IP Advanced WAF or BIG-IP ASM is enabled on a virtual server and the virtual server is under brute force attack, the MySQL database may run out of disk space due to lack of row limit on undisclosed tables in the MYSQL database. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | BIG-IP Advanced WAF and BIG-IP ASM | 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 |
Weakness: CWE-400
References
- https://support.f5.com/csp/article/K36942191 x_refsource_MISC