CVE-2021-23028

State: Published
Severity: Not scored
Published: Sep 14, 2021
Updated: Aug 3, 2024
Reserved: Jan 6, 2021

Description

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server, undisclosed requests may cause the BIG-IP ASM bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Scores

The record has no CVSS score.

Weaknesses

CWE-20

Affected Products

Product	Versions
BIG-IP Advanced WAF and BIG-IP ASMn/a	16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4Affected

References

https://support.f5.com/csp/article/K00602225

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.