f5 big-ip access policy manager, f5 big-ip advanced firewall manager, f5 big-ip analytics +11 lainnya
CVSS 5.9 · Medium EPSS 6,0%
Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada f5 big-ip access policy manager, f5 big-ip advanced firewall manager +12 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.
The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack, a different issue than CVE-2012-4929.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip access policy manager | Versi 10.1.0 hingga 10.2.4 |
| f5 | big-ip access policy manager | Versi 11.0.0 hingga 11.6.1 |
| f5 | big-ip access policy manager | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip access policy manager | Versi 13.0.0 |
| f5 | big-ip advanced firewall manager | Versi 11.3.0 hingga 11.6.1 |
| f5 | big-ip advanced firewall manager | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip advanced firewall manager | Versi 13.0.0 |
| f5 | big-ip analytics | Versi 11.0.0 hingga 11.6.1 |
| f5 | big-ip analytics | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip analytics | Versi 13.0.0 |
| f5 | big-ip application acceleration manager | Versi 11.4.0 hingga 11.6.1 |
| f5 | big-ip application acceleration manager | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip application acceleration manager | Versi 13.0.0 |
| f5 | big-ip application security manager | Versi 9.2.0 hingga 9.4.8 |
| f5 | big-ip application security manager | Versi 10.0.0 hingga 10.2.4 |
| f5 | big-ip application security manager | Versi 11.0.0 hingga 11.6.1 |
| f5 | big-ip application security manager | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip application security manager | Versi 13.0.0 |
| f5 | big-ip edge gateway | Versi 10.1.0 hingga 10.2.4 |
| f5 | big-ip edge gateway | Versi 11.0.0 hingga 11.3.0 |
| f5 | big-ip link controller | Versi 9.2.2 hingga 9.4.8 |
| f5 | big-ip link controller | Versi 10.0.0 hingga 10.2.4 |
| f5 | big-ip link controller | Versi 11.0.0 hingga 11.6.1 |
| f5 | big-ip link controller | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip link controller | Versi 13.0.0 |
| f5 | big-ip local traffic manager | Versi 9.0.0 hingga 9.6.1 |
| f5 | big-ip local traffic manager | Versi 10.0.0 hingga 10.2.4 |
| f5 | big-ip local traffic manager | Versi 11.0.0 hingga 11.6.1 |
| f5 | big-ip local traffic manager | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip local traffic manager | Versi 13.0.0 |
| f5 | big-ip policy enforcement manager | Versi 11.3.0 hingga 11.6.1 |
| f5 | big-ip policy enforcement manager | Versi 12.0.0 hingga 12.1.2 |
| f5 | big-ip policy enforcement manager | Versi 13.0.0 |
| f5 | big-ip protocol security module | Versi 9.4.5 hingga 9.4.8 |
| f5 | big-ip protocol security module | Versi 10.0.0 hingga 10.2.4 |
| f5 | big-ip protocol security module | Versi 11.0.0 hingga 11.4.1 |
| f5 | big-ip wan optimization manager | Versi 10.0.0 hingga 10.2.4 |
| f5 | big-ip wan optimization manager | Versi 11.0.0 hingga 11.3.0 |
| f5 | big-ip webaccelerator | Versi 9.4.0 hingga 9.4.8 |
| f5 | big-ip webaccelerator | Versi 10.0.0 hingga 10.2.4 |
| f5 | big-ip webaccelerator | Versi 11.0.0 hingga 11.3.0 |
| f5 | firepass | Versi 6.0.0 hingga 6.1.0 |
| f5 | firepass | Versi 7.0.0 |
| f5 | arx | Versi 5.0.0 hingga 5.3.1 |
| f5 | arx | Versi 6.0.0 hingga 6.4.0 |