PT-2016-4843 · F5 · F5 Big-Ip

Published 2016-08-26 · Updated 2019-06-06 · CVE-2016-1497

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 11.0.x through 11.2.x before 11.2.1 HF16 F5 BIG-IP systems versions 11.3.x F5 BIG-IP systems versions 11.4.x before 11.4.1 HF10 F5 BIG-IP systems versions 11.5.x before 11.5.4 HF2 F5 BIG-IP systems versions 11.6.x before 11.6.1 F5 BIG-IP systems version 12.0.0 before HF1

Description The Configuration utility in F5 BIG-IP systems allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.

Recommendations For versions 11.0.x through 11.2.x before 11.2.1 HF16, update to version 11.2.1 HF16 or later. For versions 11.3.x, update to a version that is not affected, as no specific fixed version is provided for this range. For versions 11.4.x before 11.4.1 HF10, update to version 11.4.1 HF10 or later. For versions 11.5.x before 11.5.4 HF2, update to version 11.5.4 HF2 or later. For versions 11.6.x before 11.6.1, update to version 11.6.1 or later. For version 12.0.0 before HF1, update to version 12.0.0 HF1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-1497

Affected Products

F5 Big-Ip

References · 5

• https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1497 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1497 · Security Note
• http://securityfocus.com/bid/92671 · Note
• http://securitytracker.com/id/1036631 · Note