CVEvulnerability
CVE-2016-1497
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-08-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.9 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.
Affected configurations
• f5 big-ip webaccelerator 11.0.0
• f5 big-ip webaccelerator 11.1.0
• f5 big-ip webaccelerator 11.2.0
• f5 big-ip webaccelerator 11.2.1
• f5 big-ip webaccelerator 11.3.0
• f5 big-ip link controller 11.0.0
• f5 big-ip link controller 11.1.0
• f5 big-ip link controller 11.2.0
• f5 big-ip link controller 11.2.1
• f5 big-ip link controller 11.3.0
• f5 big-ip link controller 11.4.0
• f5 big-ip link controller 11.4.1
• f5 big-ip link controller 11.5.0
• f5 big-ip link controller 11.5.1
• f5 big-ip link controller 11.5.2
• f5 big-ip link controller 11.5.3
• f5 big-ip link controller 11.5.4
• f5 big-ip link controller 11.6.0
• f5 big-ip link controller 12.0.0
• f5 big-ip access policy manager 11.0.0
• f5 big-ip access policy manager 11.1.0
• f5 big-ip access policy manager 11.2.0
• f5 big-ip access policy manager 11.2.1
• f5 big-ip access policy manager 11.3.0
• f5 big-ip access policy manager 11.4.0
• f5 big-ip access policy manager 11.4.1
• f5 big-ip access policy manager 11.5.0
• f5 big-ip access policy manager 11.5.1
• f5 big-ip access policy manager 11.5.2
• f5 big-ip access policy manager 11.5.3
• f5 big-ip access policy manager 11.5.4
• f5 big-ip access policy manager 11.6.0
• f5 big-ip access policy manager 12.0.0
• f5 big-ip application security manager 11.0.0
• f5 big-ip application security manager 11.1.0
• f5 big-ip application security manager 11.2.0
• f5 big-ip application security manager 11.2.1
• f5 big-ip application security manager 11.3.0
• f5 big-ip application security manager 11.4.0
• f5 big-ip application security manager 11.4.1
• f5 big-ip application security manager 11.5.0
• f5 big-ip application security manager 11.5.1
• f5 big-ip application security manager 11.5.2
• f5 big-ip application security manager 11.5.3
• f5 big-ip application security manager 11.5.4
• f5 big-ip application security manager 11.6.0
• f5 big-ip application security manager 12.0.0
• f5 big-ip domain name system 12.0.0
• f5 big-ip global traffic manager 11.0.0
• f5 big-ip global traffic manager 11.1.0
• f5 big-ip global traffic manager 11.2.0
• f5 big-ip global traffic manager 11.2.1
• f5 big-ip global traffic manager 11.3.0
• f5 big-ip global traffic manager 11.4.0
• f5 big-ip global traffic manager 11.4.1
• f5 big-ip global traffic manager 11.5.0
• f5 big-ip global traffic manager 11.5.1
• f5 big-ip global traffic manager 11.5.2
• f5 big-ip global traffic manager 11.5.3
• f5 big-ip global traffic manager 11.5.4
… and 76 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/92671 www.securityfocus.com
- http://www.securitytracker.com/id/1036631 Third Party Advisory, VDB Entry
- https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html Vendor Advisory
- http://www.securityfocus.com/bid/92671 www.securityfocus.com
- http://www.securitytracker.com/id/1036631 Third Party Advisory, VDB Entry
- https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html Vendor Advisory