Vulnerabilities > CVE-2017-15524 - Unspecified vulnerability in Kemptechnologies web Application Firewall

CVSS 9.1 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

kemptechnologies

critical

NVD

Published: 2017-12-19

Updated: 2019-10-03

Summary

The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.

Vulnerable Configurations

Part	Description	Count
Application	Kemptechnologies Kemptechnologies WEB Application Firewall 7.0-4 Kemptechnologies WEB Application Firewall 7.0-6 Kemptechnologies WEB Application Firewall 7.0-8 Kemptechnologies WEB Application Firewall 7.0-8A Kemptechnologies WEB Application Firewall 7.0-8E Kemptechnologies WEB Application Firewall 7.0-10 Kemptechnologies WEB Application Firewall 7.0-10D Kemptechnologies WEB Application Firewall 7.0-10E Kemptechnologies WEB Application Firewall 7.0-10F Kemptechnologies WEB Application Firewall 7.0-10G Kemptechnologies WEB Application Firewall 7.0-10H Kemptechnologies WEB Application Firewall 7.0-10I Kemptechnologies WEB Application Firewall 7.0-12A Kemptechnologies WEB Application Firewall 7.0-14 Kemptechnologies WEB Application Firewall 7.0-14A Kemptechnologies WEB Application Firewall 7.0-14C Kemptechnologies WEB Application Firewall 7.1-16 Kemptechnologies WEB Application Firewall 7.1-16B Kemptechnologies WEB Application Firewall 7.1-18B Kemptechnologies WEB Application Firewall 7.1-20A Kemptechnologies WEB Application Firewall 7.1-20D Kemptechnologies WEB Application Firewall 7.1-22 Kemptechnologies WEB Application Firewall 7.1-22B Kemptechnologies WEB Application Firewall 7.1-24A Kemptechnologies WEB Application Firewall 7.1-24B Kemptechnologies WEB Application Firewall 7.1-26 Kemptechnologies WEB Application Firewall 7.1-26C Kemptechnologies WEB Application Firewall 7.1-28 Kemptechnologies WEB Application Firewall 7.1-28A Kemptechnologies WEB Application Firewall 7.1-28B Kemptechnologies WEB Application Firewall 7.1-30 Kemptechnologies WEB Application Firewall 7.1-30A Kemptechnologies WEB Application Firewall 7.1-32A Kemptechnologies WEB Application Firewall 7.1.34.1 Kemptechnologies WEB Application Firewall 7.1.35 Kemptechnologies WEB Application Firewall 7.1.35.2 Kemptechnologies WEB Application Firewall 7.1.35.3 Kemptechnologies WEB Application Firewall 7.1.35.4 Kemptechnologies WEB Application Firewall 7.2.36.1 Kemptechnologies WEB Application Firewall 7.2.36.2 Kemptechnologies WEB Application Firewall 7.2.37.1 Kemptechnologies WEB Application Firewall 7.2.38 Kemptechnologies WEB Application Firewall 7.2.39 Kemptechnologies WEB Application Firewall 7.2.39.1 Kemptechnologies WEB Application Firewall 7.2.40	45

Packetstorm

data source	https://packetstormsecurity.com/files/download/145433/kemplb-bypass.txt
id	PACKETSTORM:145433
last seen	2017-12-15
published	2017-12-15
reporter	Tim Kretschmann
source	https://packetstormsecurity.com/files/145433/Kemp-Load-Balancer-WAF-7.2.40-Bypass.html
title	Kemp Load Balancer WAF 7.2.40 Bypass

Summary

Vulnerable Configurations

Packetstorm

References