Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability
BID:101543
CVE-2017-6165 |Info
Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability
| Bugtraq ID: | 101543 |
| Class: | Design Error |
| CVE: |
CVE-2017-6165 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 20 2017 12:00AM |
| Updated: | Oct 20 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
F5 BIG-IP WebSafe 12.1.2 F5 BIG-IP WebSafe 12.0 F5 BIG-IP WebSafe 11.6.1 HF1 F5 BIG-IP WebSafe 11.6 F5 BIG-IP PEM 12.1.2 F5 BIG-IP PEM 12.0 F5 BIG-IP PEM 11.6.1 HF1 F5 BIG-IP PEM 11.6.0 F5 BIG-IP PEM 11.5.4 F5 BIG-IP PEM 11.5.1 HF6 F5 BIG-IP LTM 12.1.2 F5 BIG-IP LTM 12.0 F5 BIG-IP LTM 11.6.1 HF1 F5 BIG-IP LTM 11.5.1 HF6 F5 BIG-IP LTM 11.6.0 F5 BIG-IP LTM 11.5.4 F5 BIG-IP GTM 11.6.1 HF1 F5 BIG-IP GTM 11.6.0 F5 BIG-IP GTM 11.5.4 F5 BIG-IP GTM 11.5.1 HF6 F5 BIG-IP DNS 12.1.2 F5 BIG-IP DNS 12.0 F5 BIG-IP ASM 12.1.2 F5 BIG-IP ASM 12.0 F5 BIG-IP ASM 11.6.1 HF1 F5 BIG-IP ASM 11.5.1 HF6 F5 BIG-IP ASM 11.6.0 F5 BIG-IP ASM 11.5.4 F5 BIG-IP APM 12.1.2 F5 BIG-IP APM 12.0 F5 BIG-IP APM 11.6.1 HF1 F5 BIG-IP APM 11.6.0 F5 BIG-IP APM 11.5.4 F5 BIG-IP APM 11.5.1 HF6 F5 BIG-IP Analytics 12.1.2 F5 BIG-IP Analytics 12.0 F5 BIG-IP Analytics 11.6.1 HF1 F5 BIG-IP Analytics 11.6.0 F5 BIG-IP Analytics 11.5.1 HF6 F5 BIG-IP AFM 12.1.2 F5 BIG-IP AFM 12.0 F5 BIG-IP AFM 11.6.1 HF1 F5 BIG-IP AFM 11.6.0 F5 BIG-IP AFM 11.5.4 F5 BIG-IP AFM 11.5.1 HF6 F5 BIG-IP AAM 12.1.2 F5 BIG-IP AAM 12.0 F5 BIG-IP AAM 11.6.1 HF1 F5 BIG-IP AAM 11.5.1 HF6 F5 BIG-IP AAM 11.6.0 F5 BIG-IP AAM 11.5.4 |
| Not Vulnerable: |
F5 BIG-IP WebSafe 12.1.2 HF1 F5 BIG-IP WebSafe 11.6.1 HF2 F5 BIG-IP PEM 12.1.2 HF1 F5 BIG-IP PEM 11.6.1 HF2 F5 BIG-IP PEM 11.5.5 F5 BIG-IP LTM 12.1.2 HF1 F5 BIG-IP LTM 11.6.1 HF2 F5 BIG-IP LTM 11.5.5 F5 BIG-IP GTM 12.1.2 HF1 F5 BIG-IP GTM 11.6.1 HF2 F5 BIG-IP GTM 11.5.5 F5 BIG-IP DNS 12.1.2 HF1 F5 BIG-IP ASM 12.1.2 HF1 F5 BIG-IP ASM 11.6.1 HF2 F5 BIG-IP ASM 11.5.5 F5 BIG-IP APM 12.1.2 HF1 F5 BIG-IP APM 11.6.1 HF2 F5 BIG-IP APM 11.5.5 F5 BIG-IP Analytics 12.1.2 HF1 F5 BIG-IP Analytics 11.6.1 HF2 F5 BIG-IP Analytics 11.5.5 F5 BIG-IP AFM 12.1.2 HF1 F5 BIG-IP AFM 11.6.1 HF2 F5 BIG-IP AFM 11.5.5 F5 BIG-IP AAM 12.1.2 HF1 F5 BIG-IP AAM 11.6.1 HF2 F5 BIG-IP AAM 11.5.5 |
Discussion
Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability
Multiple F5 BIG-IP products are prone to a local information-disclosure vulnerability.
Successful exploits may allow an attacker to obtain sensitive information that may lead to further attacks. Failed exploit attempts will result in a denial of service condition.
Multiple F5 BIG-IP products are prone to a local information-disclosure vulnerability.
Successful exploits may allow an attacker to obtain sensitive information that may lead to further attacks. Failed exploit attempts will result in a denial of service condition.
Exploit / POC
Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability
References:
References: