7.4

CVE-2016-2084

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to obtain sensitive information or cause a denial of service (disruption) by leveraging a target instance configuration.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-iq Security Version 4.2.0
F5 ≫ Big-iq Security Version 4.3.0
F5 ≫ Big-iq Security Version 4.4.0
F5 ≫ Big-iq Security Version 4.5.0
F5 ≫ Big-ip Webaccelerator Version 11.3.0
F5 ≫ Big-ip Access Policy Manager Version 11.3.0
F5 ≫ Big-ip Access Policy Manager Version 11.4.0
F5 ≫ Big-ip Access Policy Manager Version 11.4.1
F5 ≫ Big-ip Access Policy Manager Version 11.5.0
F5 ≫ Big-ip Access Policy Manager Version 11.5.1
F5 ≫ Big-ip Access Policy Manager Version 11.5.2
F5 ≫ Big-ip Access Policy Manager Version 11.5.3
F5 ≫ Big-ip Access Policy Manager Version 11.5.4
F5 ≫ Big-ip Access Policy Manager Version 11.6.0
F5 ≫ Big-ip Access Policy Manager Version 12.0.0
F5 ≫ Big-iq Cloud Version 4.2.0
F5 ≫ Big-iq Cloud Version 4.3.0
F5 ≫ Big-iq Cloud Version 4.4.0
F5 ≫ Big-iq Cloud Version 4.5.0
F5 ≫ Big-ip Global Traffic Manager Version 11.3.0
F5 ≫ Big-ip Global Traffic Manager Version 11.4.0
F5 ≫ Big-ip Global Traffic Manager Version 11.4.1
F5 ≫ Big-ip Global Traffic Manager Version 11.5.0
F5 ≫ Big-ip Global Traffic Manager Version 11.5.1
F5 ≫ Big-ip Global Traffic Manager Version 11.5.2
F5 ≫ Big-ip Global Traffic Manager Version 11.5.3
F5 ≫ Big-ip Global Traffic Manager Version 11.5.4
F5 ≫ Big-ip Global Traffic Manager Version 11.6.0
F5 ≫ Big-ip Local Traffic Manager Version 11.3.0
F5 ≫ Big-ip Local Traffic Manager Version 11.4.0
F5 ≫ Big-ip Local Traffic Manager Version 11.4.1
F5 ≫ Big-ip Local Traffic Manager Version 11.5.0
F5 ≫ Big-ip Local Traffic Manager Version 11.5.1
F5 ≫ Big-ip Local Traffic Manager Version 11.5.2
F5 ≫ Big-ip Local Traffic Manager Version 11.5.3
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4
F5 ≫ Big-ip Local Traffic Manager Version 11.6.0
F5 ≫ Big-ip Local Traffic Manager Version 12.0.0
F5 ≫ Big-iq Device Version 4.2.0
F5 ≫ Big-iq Device Version 4.3.0
F5 ≫ Big-iq Device Version 4.4.0
F5 ≫ Big-iq Device Version 4.5.0
F5 ≫ Big-ip Edge Gateway Version 11.3.0
F5 ≫ Big-ip Wan Optimization Manager Version 11.3.0
F5 ≫ Big-ip Link Controller Version 11.3.0
F5 ≫ Big-ip Link Controller Version 11.4.0
F5 ≫ Big-ip Link Controller Version 11.4.1
F5 ≫ Big-ip Link Controller Version 11.5.0
F5 ≫ Big-ip Link Controller Version 11.5.1
F5 ≫ Big-ip Link Controller Version 11.5.2
F5 ≫ Big-ip Link Controller Version 11.5.3
F5 ≫ Big-ip Link Controller Version 11.5.4
F5 ≫ Big-ip Link Controller Version 11.6.0
F5 ≫ Big-ip Link Controller Version 12.0.0
F5 ≫ Big-ip Protocol Security Module Version 11.3.0
F5 ≫ Big-ip Protocol Security Module Version 11.4.0
F5 ≫ Big-ip Analytics Version 11.3.0
F5 ≫ Big-ip Analytics Version 11.4.0
F5 ≫ Big-ip Analytics Version 11.4.1
F5 ≫ Big-ip Analytics Version 11.5.0
F5 ≫ Big-ip Analytics Version 11.5.1
F5 ≫ Big-ip Analytics Version 11.5.2
F5 ≫ Big-ip Analytics Version 11.5.3
F5 ≫ Big-ip Analytics Version 11.5.4
F5 ≫ Big-ip Analytics Version 11.6.0
F5 ≫ Big-ip Analytics Version 12.0.0
F5 ≫ Big-ip Domain Name System Version 12.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.79% 0.515
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.4 2.2 5.2
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
NIST 4 4.9 4.9
AV:N/AC:H/Au:N/C:P/I:N/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.securitytracker.com/id/1035520
https://support.f5.com/kb/en-us/solutions/public/k/11/sol11772107.html
Vendor Advisory