PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2023-46747

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2023-46747.

Coverage Span
2023-11-02
Reports
1 related reports

Associated Reports & Timeline

1.
F5 BIG-IP Unauth RCE via AJP Smuggling (CVE-2023-46747) - Technical Analysis
projectdiscovery.io | vulnerability | | Original ↗ | .md | #bug-bounty | #rce
Description: CVE-2023-46747 is a critical vulnerability in the F5 BIG-IP Configuration Utility identified as a request smuggling bug within the Apache JServ Protocol (AJP). The flaw could potentially allow unauthenticated attackers with network access to the BIG-IP system through the management port and/or self-IP addresses to execute arbitrary system commands. This vulnerability was discovered and reported by Thomas Hendrickson and Michael Weber of Praetorian Security. It has a CVSS score of 9