QID 376720

Date Published: 2024-02-15

QID 376720: F5 BIG-IP Access Policy Manager (APM) RDP Resource Sensitive Information Disclosure Vulnerability (K74302282)

F5 BIG-IP Access Policy Manager (APM) is a secure, flexible, high-performance solution that provides unified global access to your network, cloud, and applications.

Affected Versions:
BIG-IP APM v16.1.0 prior to version 16.1.2
BIG-IP APM v15.1.0 prior to version 15.1.5
BIG-IP APM v14.1.0 prior to version 14.1.4
BIG-IP APM v13.1.0 prior to version 13.1.4
BIG-IP APM v12.1.0 prior to version 12.1.6
BIG-IP APM v11.6.1 prior to version 11.6.5

QID Detection Logic (Authenticated):
This QID checks for vulnerable version of F5 BIG-IP by running the 'tmsh -q show /sys version' command.

Successful exploitation of this vulnerability may expose sensitive information or RDP actions to users who are not explicitly authorized to have access to that resource or information.

CVSS V3 rated as High - 7.3 severity.

CVSS V2 rated as High - 7.5 severity.

Solution

For more information about patch details please refer to: K74302282

Vendor References

K74302282 - support.f5.com/csp/article/K74302282

CVEs related to QID 376720

Software Advisories

Advisory ID	Software	Component	Link
K74302282			support.f5.com/csp/article/K74302282

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].