CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2019-10744

CVSS 9.1v3.1pub. 2019-07-26upd. 2024-11-21

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

F5 Big Ip Access Policy Manager
APP
F5
15.1.0 – 15.1.0.2 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Advanced Firewall Manager
APP
F5
12.1.0 – 12.1.5.2 (excl.)15.1.0 – 15.1.0.2 (excl.)15.0.0 – 15.0.1.4 (excl.)14.1.0 – 14.1.2.5 (excl.)13.1.0 – 13.1.3.4 (excl.)
F5 Big Ip Analytics
APP
F5
15.0.0 – 15.0.1.3 (excl.)12.1.0 – 12.1.513.1.0 – 13.1.314.1.0 – 14.1.215.1.0 – 15.1.0.2 (excl.)
F5 Big Ip Application Acceleration Manager
APP
F5
12.1.0 – 12.1.5.2 (excl.)15.1.0 – 15.1.0.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Application Security Manager
APP
F5
14.1.0 – 14.1.2.5 (excl.)15.1.0 – 15.1.0.2 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Application Visibility And Reporting
APP
F5
15.1.0 – 15.1.1 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.314.1.0 – 14.1.2.5 (excl.)
F5 Big Ip Domain Name System
APP
F5
15.1.0 – 15.1.0.2 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Edge Gateway
APP
F5
15.1.0 – 15.1.0.2 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Fraud Protection Service
APP
F5
12.1.0 – 12.1.5.2 (excl.)15.1.0 – 15.1.0.2 (excl.)15.0.0 – 15.0.1.4 (excl.)14.1.0 – 14.1.2.5 (excl.)13.1.0 – 13.1.3.4 (excl.)
F5 Big Ip Global Traffic Manager
APP
F5
15.0.0 – 15.0.1.4 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.1.0 – 15.1.0.2 (excl.)
F5 Big Ip Link Controller
APP
F5
15.1.0 – 15.1.0.2 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Local Traffic Manager
APP
F5
15.0.0 – 15.0.1.4 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.1.0 – 15.1.0.2 (excl.)
F5 Big Ip Policy Enforcement Manager
APP
F5
15.1.0 – 15.1.0.2 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.0.0 – 15.0.1.4 (excl.)
F5 Big Ip Webaccelerator
APP
F5
15.0.0 – 15.0.1.4 (excl.)12.1.0 – 12.1.5.2 (excl.)13.1.0 – 13.1.3.4 (excl.)14.1.0 – 14.1.2.5 (excl.)15.1.0 – 15.1.0.2 (excl.)
F5 Big Iq Centralized Management
APP
F5
5.4.07.0.06.0.0 – 6.1.0
F5 Iworkflow
APP
F5
2.3.0
Lodash
APP
Lodash
< 4.17.12
Netapp Active Iq Unified Manager
APP
Netapp
all versions
Netapp Service Level Manager
APP
Netapp
all versions
Oracle Banking Extensibility Workbench
APP
Oracle
14.3.014.4.0
Red Hat Virtualization Manager
APP
Redhat
4.3