PT-2014-3013 · F5 · F5 Big-Ip Apm+2

Published 2014-02-10 · Updated 2019-05-03 · CVE-2013-6024

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 10.x through 14.x F5 BIG-IP Edge Gateway versions 10.x through 11.x F5 FirePass version 7.0.0

Description The issue allows attackers to obtain sensitive information from process memory. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For F5 BIG-IP APM versions 10.x through 14.x, update to a version that includes a fix for this issue. For F5 BIG-IP Edge Gateway versions 10.x through 11.x, update to a version that includes a fix for this issue. For F5 FirePass version 7.0.0, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-6024

Affected Products

F5 Big-Ip Apm

F5 Big-Ip Edge Gateway

F5 Firepass

References · 6

• http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6024 · Security Note
• https://t.me/defcon_news/10937 · Telegram Post
• http://kb.cert.org/vuls/id/146430 · Note
• http://securityfocus.com/bid/65422 · Note
• https://support.f5.com/csp/article/K14969 · Note