Test ID:	1.3.6.1.4.1.25623.1.0.111016
Category:	Web application abuses
Title:	F5 FirePass Multiple Input Validation Vulnerabilities
Summary:	F5 FirePass is prone to multiple input-validation; vulnerabilities.
Description:	Summary: F5 FirePass is prone to multiple input-validation vulnerabilities. Vulnerability Insight: The device fails to sufficiently sanitize user-supplied input. These issues include information-disclosure, security bypass, and cross-site scripting vulnerabilities. Vulnerability Impact: An attacker can exploit these issues to bypass security restrictions, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system. Other attacks are also possible. Affected Software/OS: F5 FirePass 5.4.0 through 5.5.1 and 6.0.0. Solution: The vendor has released updates listened in the referenced advisory. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0195 BugTraq ID: 21957 http://www.securityfocus.com/bid/21957 http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html http://www.mnin.org/advisories/2007_firepass.pdf http://www.osvdb.org/32736 http://secunia.com/advisories/23627
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.