CVE-2016-1497
Summary
| CVE | CVE-2016-1497 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-08-26 14:59:00 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors. |
Risk And Classification
Primary CVSS: v3.0 4.9 MEDIUM from [email protected]
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.002340000 probability, percentile 0.463800000 (date 2026-06-02)
Problem Types: CWE-200 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 4.9 | MEDIUM | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | [email protected] | Primary | 4 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:S/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | F5 | Big-ip Access Policy Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Analytics | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Analytics | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Protocol Security Module | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Wan Optimization Manager | 11.3.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.0.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.1.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.2.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.3.0 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multiple F5 BIG-IP Products CVE-2016-1497 Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SOL31925518 - BIG-IP APM access logs vulnerability CVE-2016-1497 | af854a3a-2127-422b-91ae-364da2661108 | support.f5.com | Vendor Advisory |
| F5 BIG-IP Configuration Utility Flaw Lets Remote Authenticated Users Access APM Logs on the Target System - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.