CVE-2018-5544

Summary

CVE	CVE-2018-5544
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2018-07-31 14:29:00 UTC
Updated	2018-10-10 19:26:00 UTC
Description	When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters.

Risk And Classification

Problem Types: CWE-200

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	F5	Big-ip Access Policy Manager	All	All	All	All
Application	F5	Big-ip Access Policy Manager	All	All	All	All

References

Reference	Source	Link	Tags
support.f5.com/csp/article/K23024812	CONFIRM	support.f5.com	Vendor Advisory
F5 BIG-IP APM Page Rendering Bug Lets Remote Users Obtain Potentially Sensitive Information on the Target System - SecurityTracker	SECTRACK	www.securitytracker.com	Third Party Advisory, VDB Entry
F5 BIG-IP APM CVE-2018-5544 Information Disclosure Vulnerability	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

378014 F5 BIG-IP Access Policy Manager (APM) Information Disclosure Vulnerability cve-2018-5544 (K23024812)