Back to feed
EUVD-2016-2595 · Published Aug 26, 2016
The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.
Technologies
F5 Big-Ip Domain Name SystemF5 Big-Ip Edge GatewayF5 Big-Ip WebacceleratorF5 Big-Ip Protocol Security ModuleF5 Big-Ip Application Security ManagerF5 Big-Ip AnalyticsF5 Big-Ip Link ControllerF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Global Traffic ManagerF5 Big-Ip Policy Enforcement ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Wan Optimization Manager
Weaknesses
CWE-200
CVSS scores
- v3.04.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - v2.04.0
AV:N/AC:L/Au:S/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
