Code injection

2023-10-1013:15:00

PRIOn knowledge base

www.prio-n.com

code injection

big-ip

dns

ltm

tsig key

plaintext

audit log

nvd

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

When on BIG-IP DNS or BIG-IP LTM enabled with DNS Services License, and a TSIG key is created, it is logged in plaintext in the audit log. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_domain_name_systemge16.1.0
big-ip_domain_name_systemlt16.1.4
big-ip_domain_name_systemge15.1.0
big-ip_domain_name_systemlt15.1.9
big-ip_domain_name_systemge13.1.0
big-ip_domain_name_systemle14.1.5
big-ip_local_traffic_managerge13.1.0
big-ip_local_traffic_managerle14.1.5
big-ip_local_traffic_managerge15.1.0
big-ip_local_traffic_managerlt15.1.9

Name	Operator	Version
big-ip_domain_name_system	ge	16.1.0
big-ip_domain_name_system	lt	16.1.4
big-ip_domain_name_system	ge	15.1.0
big-ip_domain_name_system	lt	15.1.9
big-ip_domain_name_system	ge	13.1.0
big-ip_domain_name_system	le	14.1.5
big-ip_local_traffic_manager	ge	13.1.0
big-ip_local_traffic_manager	le	14.1.5
big-ip_local_traffic_manager	ge	15.1.0
big-ip_local_traffic_manager	lt	15.1.9