Design/Logic Flaw

2017-02-2015:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.

CPENameOperatorVersion
big-ip_access_policy_managereq11.5.2
big-ip_access_policy_managereq11.5.0
big-ip_access_policy_managereq12.0.0
big-ip_access_policy_managereq11.5.1
big-ip_access_policy_managereq11.5.3
big-ip_access_policy_managereq11.5.4
big-ip_access_policy_managereq11.6.1
big-ip_access_policy_managereq11.6.0
big-ip_advanced_firewall_managereq11.5.4
big-ip_advanced_firewall_managereq11.5.2

Name	Operator	Version
big-ip_access_policy_manager	eq	11.5.2
big-ip_access_policy_manager	eq	11.5.0
big-ip_access_policy_manager	eq	12.0.0
big-ip_access_policy_manager	eq	11.5.1
big-ip_access_policy_manager	eq	11.5.3
big-ip_access_policy_manager	eq	11.5.4
big-ip_access_policy_manager	eq	11.6.1
big-ip_access_policy_manager	eq	11.6.0
big-ip_advanced_firewall_manager	eq	11.5.4
big-ip_advanced_firewall_manager	eq	11.5.2