f5 big-ip access policy manager, f5 big-ip advanced firewall manager, f5 big-ip analytics +8 lainnya
CVSS 9.1 · Critical EPSS 0,83%
Kerentanan Cleartext Transmission of Sensitive Information pada f5 big-ip access policy manager, f5 big-ip advanced firewall manager +9 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut NVD.
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems set up for connection mirroring in a high availability (HA) pair transfer sensitive cryptographic objects over an insecure communications channel. This is a control plane issue which is exposed only on the network used for connection mirroring.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip access policy manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip access policy manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip access policy manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip access policy manager | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip advanced firewall manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip advanced firewall manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip advanced firewall manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip advanced firewall manager | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip analytics | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip analytics | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip analytics | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip analytics | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip application acceleration manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip application acceleration manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip application acceleration manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip application acceleration manager | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip application security manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip application security manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip application security manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip application security manager | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip domain name system | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip domain name system | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip domain name system | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip domain name system | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip fraud protection service | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip fraud protection service | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip fraud protection service | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip fraud protection service | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip global traffic manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip global traffic manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip global traffic manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip global traffic manager | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip link controller | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip link controller | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip link controller | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip link controller | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip local traffic manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip local traffic manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip local traffic manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip local traffic manager | Versi 15.0.0 hingga 15.1.0.1 |
| f5 | big-ip policy enforcement manager | Versi 12.1.0 hingga 12.1.5.1 |
| f5 | big-ip policy enforcement manager | Versi 13.1.0 hingga 13.1.3.3 |
| f5 | big-ip policy enforcement manager | Versi 14.1.0 hingga 14.1.2.3 |
| f5 | big-ip policy enforcement manager | Versi 15.0.0 hingga 15.1.0.1 |