Details of VAR-201606-0100

ID

VAR-201606-0100

CVE

CVE-2016-3687

TITLE

F5 BIG-IP APM and Edge Gateway Open redirect vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2016-003283

DESCRIPTION

Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the SSO_ORIG_URI parameter. Supplementary information : CWE Vulnerability type by CWE-601: URL Redirection to Untrusted Site ( Open redirect ) Has been identified. http://cwe.mitre.org/data/definitions/601.htmlBy a third party SSO_ORIG_URI Parameter base64 Encoded with URL Any user through Web You may be redirected to a site and run a phishing attack. An attacker can leverage this issue by constructing a crafted URI and enticing a user to follow it. When an unsuspecting victim follows the link, they may be redirected to an attacker-controlled site; this may aid in phishing attacks. Other attacks are possible. BIG-IP APM is a solution that provides secure and unified access to business-critical applications and networks; BIG-IP Edge Gateway is a remote access solution

Trust: 1.98

sources: NVD: CVE-2016-3687 // JVNDB: JVNDB-2016-003283 // BID: 91333 // VULHUB: VHN-92506

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.2.1	Trust: 2.4
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	11.2.1	Trust: 2.4
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.0	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.4	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.3	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.1	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.2	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.0	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.0	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.1	Trust: 1.6
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8

sources: JVNDB: JVNDB-2016-003283 // NVD: CVE-2016-3687 // CNNVD: CNNVD-201606-315

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2016-3687
value:	MEDIUM
Trust: 1.8
CNNVD:	CNNVD-201606-315
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-92506
value:	MEDIUM
Trust: 0.1

NVD:
severity:	MEDIUM
baseScore:	4.0
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	4.9
impactScore:	4.9
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	TRUE
version:	2.0
Trust: 1.0
NVD:	CVE-2016-3687
severity:	MEDIUM
baseScore:	4.0
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
VULHUB:	VHN-92506
severity:	MEDIUM
baseScore:	4.0
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	4.9
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

NVD:
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	1.6
impactScore:	3.6
version:	3.0
Trust: 1.0
NVD:	CVE-2016-3687
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-92506 // JVNDB: JVNDB-2016-003283 // NVD: CVE-2016-3687 // CNNVD: CNNVD-201606-315

PROBLEMTYPE DATA

problemtype:	NVD-CWE-Other	Trust: 1.0
problemtype:	CWE-Other	Trust: 0.8

sources: JVNDB: JVNDB-2016-003283 // NVD: CVE-2016-3687

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201606-315

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-201606-315

CONFIGURATIONS

sources: NVD: CVE-2016-3687

PATCH

title:	SOL26738102: BIG-IP APM SSO vulnerability CVE-2016-3687	url:	https://support.f5.com/kb/en-us/solutions/public/k/26/sol26738102.html	Trust: 0.8
title:	F5 BIG-IP APM and BIG-IP Edge Gateway Fixes for open redirect vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=62263	Trust: 0.6

sources: JVNDB: JVNDB-2016-003283 // CNNVD: CNNVD-201606-315

EXTERNAL IDS

db:	NVD	id:	CVE-2016-3687	Trust: 2.8
db:	SECTRACK	id:	1036111	Trust: 1.7
db:	JVNDB	id:	JVNDB-2016-003283	Trust: 0.8
db:	CNNVD	id:	CNNVD-201606-315	Trust: 0.7
db:	AUSCERT	id:	ESB-2016.1482	Trust: 0.6
db:	BID	id:	91333	Trust: 0.3
db:	VULHUB	id:	VHN-92506	Trust: 0.1

sources: VULHUB: VHN-92506 // BID: 91333 // JVNDB: JVNDB-2016-003283 // NVD: CVE-2016-3687 // CNNVD: CNNVD-201606-315

REFERENCES

url:	https://support.f5.com/kb/en-us/solutions/public/k/26/sol26738102.html	Trust: 2.0
url:	http://www.securitytracker.com/id/1036111	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-3687	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-3687	Trust: 0.8
url:	http://www.auscert.org.au/./render.html?it=35722	Trust: 0.6
url:	http://www.f5.com/products/big-ip/	Trust: 0.3

sources: VULHUB: VHN-92506 // BID: 91333 // JVNDB: JVNDB-2016-003283 // NVD: CVE-2016-3687 // CNNVD: CNNVD-201606-315

CREDITS

The vendor reported the issue.

Trust: 0.3

sources: BID: 91333

SOURCES

db:	VULHUB	id:	VHN-92506
db:	BID	id:	91333
db:	JVNDB	id:	JVNDB-2016-003283
db:	NVD	id:	CVE-2016-3687
db:	CNNVD	id:	CNNVD-201606-315

LAST UPDATE DATE

2023-12-18T13:29:29.471000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-92506	date:	2016-06-20T00:00:00
db:	BID	id:	91333	date:	2016-07-06T15:03:00
db:	JVNDB	id:	JVNDB-2016-003283	date:	2016-06-21T00:00:00
db:	NVD	id:	CVE-2016-3687	date:	2016-06-20T12:16:14.263
db:	CNNVD	id:	CNNVD-201606-315	date:	2016-06-17T00:00:00

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-92506	date:	2016-06-16T00:00:00
db:	BID	id:	91333	date:	2016-06-13T00:00:00
db:	JVNDB	id:	JVNDB-2016-003283	date:	2016-06-21T00:00:00
db:	NVD	id:	CVE-2016-3687	date:	2016-06-16T18:59:09.313
db:	CNNVD	id:	CNNVD-201606-315	date:	2016-06-17T00:00:00