CVE Catalog

CVE-1999-1550

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
8.59%

94th percentile - higher than 94% of all known CVEs

Summary

The bigconf.conf file in F5 BIG/ip version 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the 'file' parameter.

Risk Assessment

Attackers may gain access to sensitive data, potentially leading to further attacks on the system or information leakage.

Recommendation

It is recommended to upgrade to a newer version of F5 BIG/ip to mitigate this vulnerability and restrict access to the bigconf.conf file.

Original NVD description (English source)

bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS