CVE:CVE-2012-3000
CNNVD:CNNVD-201301-449
F5 BIG-IP LTM等都是美国F5公司的产品。LTM是一款本地流量管理器；GTM是一款广域流量管理器；WebAccelerator是一款应用加速器。
多款F5 BIG-IP产品中存在SQL注入漏洞，该漏洞源于sam/admin/reports/php/saveSettings.php脚本没有充分过滤‘defaultQuery’参数。远程攻击者可利用该漏洞执行任意SQL命令。以下产品受到影响：F5 BIG-IP LTM，GTM，ASM，Link Controller，PSM，APM，Edge Gateway，Analytics，WebAccelerator and WOM 11.2.0-HF3之前的11.2.x版本和11.2.1-HF3之前的11.2.x版本。
solution:Upgrade f5 big-ip_webaccelerator to a higher version than 11.0.0,11.1.0,11.2.0,11.2.1,and avoid the version 11.0.0,11.1.0,11.2.0,11.2.1; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,11.2.0,11.2.1,and avoid the version 11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,11.2.0,11.2.1; Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,11.2.0,11.2.1,and avoid the version 11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,11.2.0,11.2.1; Upgrade f5 big-ip_protocol_security_module to a higher version than 11.0.0,11.1.0,11.2.0,11.2.1,and avoid the version 11.0.0,11.1.0,11.2.0,11.2.1; Upgrade f5 big-ip_wan_optimization_manager to a higher version than 11.0.0,11.1.0,11.2.0,11.2.1,and avoid the version 11.0.0,11.1.0,11.2.0,11.2.1; Upgrade f5 big-ip_link_controller to a higher version than 11.0.0,11.1.0,11.2.0,11.2.1,and avoid the version 11.0.0,11.1.0,11.2.0,11.2.1; Upgrade f5 big-ip_analytics to a higher version than 11.0.0,11.1.0,11.2.0,11.2.1,and avoid the version 11.0.0,11.1.0,11.2.0,11.2.1; Upgrade f5 big-ip_application_security_manager to a higher version than 11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,11.2.0,11.2.1,and avoid the version 11.0.0,11.0.0:hf1,11.1.0,11.1.0:hf2,11.2.0,11.2.1; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.1.0,11.2.0,11.2.1,11.0.0,and avoid the version 11.1.0,11.2.0,11.2.1,11.0.0; Upgrade f5 big-ip_edge_gateway to a higher version than 11.0.0,11.1.0,11.2.0,11.2.1,and avoid the version 11.0.0,11.1.0,11.2.0,11.2.1