CVSS 4.5 · Medium EPSS 0,34%
Kerentanan pada f5 access policy manager clients, f5 big-ip access policy manager. Skor CVSS 3.1 4.5 (Medium) menurut NVD.
When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all 12.1.x and 11.6.x versions or Edge Client versions 7.2.1.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, or 7.1.8.x before 7.1.8.5, the session ID is visible in the arguments of the f5vpn.exe command when VPN is launched from the browser on a Windows system. Addressing this issue requires both the client and server fixes. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | access policy manager clients | Versi 7.1.5 hingga sebelum 7.1.8.5 |
| f5 | access policy manager clients | Versi 7.1.9 hingga sebelum 7.1.9.8 |
| f5 | access policy manager clients | Versi 7.2.1 hingga sebelum 7.2.1.1 |
| f5 | big-ip access policy manager | Versi 11.6.1 hingga 11.6.5 |
| f5 | big-ip access policy manager | Versi 12.1.0 hingga 12.1.5 |
| f5 | big-ip access policy manager | Versi 13.1.0 hingga sebelum 13.1.3.6 |
| f5 | big-ip access policy manager | Versi 14.1.0 hingga sebelum 14.1.4 |
| f5 | big-ip access policy manager | Versi 15.1.0 hingga sebelum 15.1.2.1 |
| f5 | big-ip access policy manager | Versi 16.0.0 hingga sebelum 16.0.1.1 |