NetSight
IP …
medium4.9

CVE-2016-1497

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x be…

Impact

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.

Affected products

VendorProductAffected versions
F5Big-Ip Webaccelerator
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0
F5Big-Ip Link Controller
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Access Policy Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Application Security Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Domain Name System
Version 12.0.0
F5Big-Ip Global Traffic Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Local Traffic Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Application Acceleration Manager
Versions 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3
F5Big-Ip Protocol Security Module
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Analytics
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Advanced Firewall Manager
Versions 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1
F5Big-Ip Wan Optimization Manager
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0

Weakness classification

CWE-200

References