f5 big-ip access policy manager, f5 big-ip advanced firewall manager, f5 big-ip advanced web application firewall +18 lainnya
CVSS 4.9 · Medium EPSS 0,40%
Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada f5 big-ip access policy manager, f5 big-ip advanced firewall manager +19 lainnya. Skor CVSS 3.1 4.9 (Medium) menurut f5.com.
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip access policy manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip access policy manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip advanced firewall manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip advanced firewall manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip advanced web application firewall | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip advanced web application firewall | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip analytics | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip analytics | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip application acceleration manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip application acceleration manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip application security manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip application security manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip application visibility and reporting | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip application visibility and reporting | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip automation toolchain | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip automation toolchain | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip carrier-grade nat | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip carrier-grade nat | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip container ingress services | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip container ingress services | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip ddos hybrid defender | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip ddos hybrid defender | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip domain name system | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip domain name system | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip edge gateway | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip edge gateway | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip fraud protection service | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip fraud protection service | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip global traffic manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip global traffic manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip link controller | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip link controller | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip local traffic manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip local traffic manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip policy enforcement manager | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip policy enforcement manager | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip ssl orchestrator | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip ssl orchestrator | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip webaccelerator | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip webaccelerator | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip websafe | Versi 17.1.0 hingga 17.1.3 |
| f5 | big-ip websafe | Versi 17.5.0 hingga 17.5.1 |
| f5 | big-ip access policy manager | Versi 21.0.0 |
| f5 | big-ip advanced firewall manager | Versi 21.0.0 |
| f5 | big-ip advanced web application firewall | Versi 21.0.0 |
| f5 | big-ip analytics | Versi 21.0.0 |
| f5 | big-ip application acceleration manager | Versi 21.0.0 |
| f5 | big-ip application security manager | Versi 21.0.0 |
| f5 | big-ip application visibility and reporting | Versi 21.0.0 |
| f5 | big-ip automation toolchain | Versi 21.0.0 |
| f5 | big-ip carrier-grade nat | Versi 21.0.0 |
| f5 | big-ip container ingress services | Versi 21.0.0 |
| f5 | big-ip ddos hybrid defender | Versi 21.0.0 |
| f5 | big-ip domain name system | Versi 21.0.0 |
| f5 | big-ip edge gateway | Versi 21.0.0 |
| f5 | big-ip fraud protection service | Versi 21.0.0 |
| f5 | big-ip global traffic manager | Versi 21.0.0 |
| f5 | big-ip link controller | Versi 21.0.0 |
| f5 | big-ip local traffic manager | Versi 21.0.0 |
| f5 | big-ip policy enforcement manager | Versi 21.0.0 |