F5 BIG-IP APM Information Disclosure Vulnerability (CNVD-2023-75599)

2023-10-1100:00:00

China National Vulnerability Database

www.cnvd.org.cn

information disclosure

apm

vulnerability

sensitive information

attack

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An information disclosure vulnerability exists in the F5 BIG-IP APM, which can be exploited by an attacker to read undisclosed sensitive information.

CPENameOperatorVersion
f5 big-ip (guided configuration)eq6.0
f5 big-ip (guided configuration)eq8.0
f5 big-ip (apm) >=16.1.0，le16.1.3
f5 big-ip (apm) >=15.1.0，le15.1.7
f5 big-ip (guided configuration) >=7.0，le7.7

Name	Operator	Version
f5 big-ip (guided configuration)	eq	6.0
f5 big-ip (guided configuration)	eq	8.0
f5 big-ip (apm) >=16.1.0，	le	16.1.3
f5 big-ip (apm) >=15.1.0，	le	15.1.7
f5 big-ip (guided configuration) >=7.0，	le	7.7