K57110035: BIG-IP APM Edge Client for Windows logging vulnerability CVE-2022-27636

Security Advisory Description BIG-IP Edge Client may log sensitive APM session-related information when VPN is launched on a Windows system. CVE-2022-27636 Impact An attacker with privileges on the Windows system can view the logged sensitive APM session-related information. Security Advisory...

CVE-2022-27636

creationtimestamp| type| source ---|---|--- 2022-05-05 20:42:48+00:00| seen| https://t.me/cibsecurity/42027...

CVE-2022-27636

CVE-2022-27636 is a logging vulnerability in F5 BIG-IP APM Edge Client for Windows where sensitive APM session information can be written to logs when VPN is launched. The connected F5 advisory K57110035 confirms affected products and provides fixed versions: BIG-IP APM (16.1.2.2; 16.x), (15.1.5....

F5 Networks BIG-IP : BIG-IP APM Edge Client for Windows logging vulnerability (K57110035)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.6 / 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K57110035 advisory. - On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to...