F5 Access Guided Configuration logging vulnerability CVE-2021-23046

2021-08-2413:27:00

support.f5.com

When a configuration that contains secure properties is created and deployed from Access Guided Configuration (AGC), secure properties are logged in restnoded logs. (CVE-2021-23046)

Impact

Users with access to restnodedlogs may gain access to sensitive information from the security properties of F5 Access Guided Configuration.

For more information about Guided Configuration, refer to K52653125: Overview of Guided Configuration.

CPENameOperatorVersion
big-iq centralized managementle8.1.0
big-ip afmle16.1.0
big-ip analyticsle16.1.0
big-ip apmle16.1.0
big-ip asmle16.1.0
big-ip dnsle16.1.0
big-ip fpsle16.1.0
big-ip gtmle16.1.0
big-ip link controllerle16.1.0
big-ip ltmle16.1.0

Name	Operator	Version
big-iq centralized management	le	8.1.0
big-ip afm	le	16.1.0
big-ip analytics	le	16.1.0
big-ip apm	le	16.1.0
big-ip asm	le	16.1.0
big-ip dns	le	16.1.0
big-ip fps	le	16.1.0
big-ip gtm	le	16.1.0
big-ip link controller	le	16.1.0
big-ip ltm	le	16.1.0

Rows per page:

1-10 of 151

JSON

Related for F5:K70652532