4.4

CVE-2013-6024

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5Big-ip Access Policy Manager Version10.1.0
F5Big-ip Access Policy Manager Version10.2.4
F5Big-ip Access Policy Manager Version11.0.0
F5Big-ip Access Policy Manager Version11.1.0
F5Big-ip Access Policy Manager Version11.2.0
F5Big-ip Access Policy Manager Version11.2.1
F5Big-ip Access Policy Manager Version11.3.0
F5Big-ip Edge Gateway Version10.1.0
F5Big-ip Edge Gateway Version10.2.4
F5Big-ip Edge Gateway Version11.0.0
F5Big-ip Edge Gateway Version11.5.0
F5Firepass Version6.0.0
F5Firepass Version6.1.0
F5Firepass Version7.0.0
F5Big-ip Access Policy Manager Version10.1.0
F5Big-ip Access Policy Manager Version10.2.4
F5Big-ip Access Policy Manager Version11.0.0
F5Big-ip Access Policy Manager Version11.1.0
F5Big-ip Access Policy Manager Version11.2.0
F5Big-ip Access Policy Manager Version11.2.1
F5Big-ip Access Policy Manager Version11.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.197
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.4 2.7 6.9
AV:L/AC:M/Au:S/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.