PT-2017-10507
CVE-2017-0301
·
Published
2017-12-21
·
Updated
2019-10-03
Description by
CVSS 3.1
7.6
HighMetricsAV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP APM software versions 11.5.0 through 11.5.4
F5 BIG-IP APM software versions 11.6.0 through 11.6.1
F5 BIG-IP APM software versions 12.0.0 through 12.1.2
Description
The issue affects the BIG-IP APM portal, where access requests may not return the intended resources in certain cases. This could potentially allow access to internal BIG-IP APM resources. However, it does not affect application resources or backend servers.
Recommendations
For versions 11.5.0 through 11.5.4, update to a version outside of this range to resolve the issue.
For versions 11.6.0 through 11.6.1, update to a version outside of this range to resolve the issue.
For versions 12.0.0 through 12.1.2, update to a version outside of this range to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾