PT-2017-16924 · F5+1 · Viprion+2

Published 2017-10-20 · Updated 2017-11-15 · CVE-2017-6165

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 HF6 through 11.5.4 HF4 F5 BIG-IP versions 11.6.0 through 11.6.1 HF1 F5 BIG-IP versions 12.0.0 through 12.1.2

Description The issue concerns the logging of sensitive information. In clustered deployments on VIPRION platforms, the script responsible for synchronizing SafeNet External Network HSM configuration elements between blades logs the HSM partition password in cleartext to the "/var/log/ltm" log file.

Recommendations For versions 11.5.1 HF6 through 11.5.4 HF4, consider restricting access to the "/var/log/ltm" log file to minimize the risk of password exposure until a fix is available. For versions 11.6.0 through 11.6.1 HF1, consider implementing additional logging controls to prevent sensitive information from being written to the log file. For versions 12.0.0 through 12.1.2, restrict access to the HSM partition configuration to prevent unauthorized users from obtaining the password.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2017-6165

Affected Products

F5 Big-Ip

Safenet External Network Hsm

Viprion

References · 5

• https://support.f5.com/csp/article/K74759095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6165 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6165 · Vendor Advisory
• http://securitytracker.com/id/1039638 · Note
• http://securityfocus.com/bid/101543 · Note