Vulnerability in F5 Firepass

CVE-2012-2053

The sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a password for executing commands as root, which allows local users to gain privileges via the sudo program, as demonstrated by the user account that executes PHP scripts, a different vulnerability than CVE-2012-1777.

EPSS: 0.005 (38.8th percentile) — read the EPSS interpretation.

Affected products

  • F5 Firepass — versions 6.0, 6.1.0, 7.0.0
  • N/a — versions n/a

Weakness classification (CWE)

References