Vulnerability in F5 Big-Ip Analytics

CVE-2013-7408

F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.020 (79.2th percentile) — read the EPSS interpretation.

Affected products

F5 Big-ip_analytics — versions 11.0.0, 11.1.0, 11.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (x_refsource_CONFIRM, Exploit, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)