PT-2018-17038

CVE-2018-5544

·

Published

2018-07-31

·

Updated

2018-10-10

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 12.1.0 through 12.1.3 F5 BIG-IP APM versions 13.0.0 through 13.1.1
Description The issue occurs when the F5 BIG-IP APM renders certain pages, such as those with a logon agent or a confirm box, potentially disclosing configuration information like partition and agent names via URI parameters.
Recommendations For versions 12.1.0 through 12.1.3, update to a version outside of this range to resolve the issue. For versions 13.0.0 through 13.1.1, update to a version outside of this range to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾