Lucene search
F5F5:K06110200HistoryOct 10, 2023 - 12:00 a.m.
K06110200 : BIG-IP and BIG-IQ TACACS+ audit log vulnerability CVE-2023-43485
2023-10-1000:00:00
my.f5.com
4
tacacs+ audit forwarding
shared secret exposure
control plane issue
authenticated attacker
big-ip
big-iq
Security Advisory Description
When TACACS+ audit forwarding is configured on a BIG-IP or BIG-IQ system, shared secret is logged in plaintext in the audit log. (CVE-2023-43485)
Impact
An authenticated attacker with at least auditor role privileges can view shared secret. There is no data plane exposure; this is a control plane issue only.
Related
cvelist
cvelist
CVE-2023-43485 BIGIP and BIG-IQ TACACS+ audit log Vulnerability
2023-10-10 12:34:15
nessus
nessus
nvd
nvd
CVE-2023-43485
2023-10-10 13:15:21
cve
cve
CVE-2023-43485
2023-10-10 13:15:21
prion
prion
Code injection
2023-10-10 13:15:00
cnvd
cnvd
F5 BIG-IP Information Disclosure Vulnerability (CNVD-2023-75595)
2023-10-11 00:00:00
f5
f5
K000137053 : Overview of F5 vulnerabilities (October 2023)
2023-10-10 00:00:00