PT-2017-10507

CVE-2017-0301

·

Published

2017-12-21

·

Updated

2019-10-03

Description by

CVSS 3.1
7.6
High
MetricsAV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM software versions 11.5.0 through 11.5.4 F5 BIG-IP APM software versions 11.6.0 through 11.6.1 F5 BIG-IP APM software versions 12.0.0 through 12.1.2
Description The issue affects the BIG-IP APM portal, where access requests may not return the intended resources in certain cases. This could potentially allow access to internal BIG-IP APM resources. However, it does not affect application resources or backend servers.
Recommendations For versions 11.5.0 through 11.5.4, update to a version outside of this range to resolve the issue. For versions 11.6.0 through 11.6.1, update to a version outside of this range to resolve the issue. For versions 12.0.0 through 12.1.2, update to a version outside of this range to resolve the issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾