PT-2017-16911 · F5 · F5 Big-Ip Apm

Publicado 2017-12-21 · Atualizado 2019-04-12 · CVE-2017-6139

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM software versions 12.1.2 and 13.0.0

Description The issue occurs under rare conditions where the BIG-IP APM system appends log details when responding to client requests. The details in the log file can vary. Customers running debug mode logging with BIG-IP APM are at the highest risk.

Recommendations For version 12.1.2, consider disabling debug mode logging to minimize the risk of exploitation. For version 13.0.0, consider disabling debug mode logging to minimize the risk of exploitation.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2017-6139

Produtos afetados

F5 Big-Ip Apm

Referências · 5

• https://support.f5.com/csp/article/K45432295 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-6139 · Aviso do Fabricante
• http://securityfocus.com/bid/106186 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6139 · Nota de Segurança
• http://securitytracker.com/id/1040055 · Nota