PT-2014-3013 · F5 · F5 Big-Ip Apm+2

Publicado 2014-02-10 · Atualizado 2019-05-03 · CVE-2013-6024

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 10.x through 14.x F5 BIG-IP Edge Gateway versions 10.x through 11.x F5 FirePass version 7.0.0

Description The issue allows attackers to obtain sensitive information from process memory. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For F5 BIG-IP APM versions 10.x through 14.x, update to a version that includes a fix for this issue. For F5 BIG-IP Edge Gateway versions 10.x through 11.x, update to a version that includes a fix for this issue. For F5 FirePass version 7.0.0, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-6024

Produtos afetados

F5 Big-Ip Apm

F5 Big-Ip Edge Gateway

F5 Firepass

Referências · 6

• http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html · Aviso do Fabricante
• https://t.me/defcon_news/10937 · Publicação no Telegram
• http://kb.cert.org/vuls/id/146430 · Nota
• http://securityfocus.com/bid/65422 · Nota
• https://support.f5.com/csp/article/K14969 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6024 · Nota de Segurança