CVE-2019-6656

BIG-IP APM Edge Client before version 7.1.8 7180.2019.508.705 logs the full apm session ID in the log files. Vulnerable versions of the client are bundled with BIG-IP APM versions 15.0.0-15.0.1, 14,1.0-14.1.0.6, 14.0.0-14.0.0.4, 13.0.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5. In BIG-IP APM...

CVE-2019-6656

BIG-IP APM Edge Client before version 7.1.8 7180.2019.508.705 logs the full apm session ID in the log files. Vulnerable versions of the client are bundled with BIG-IP APM versions 15.0.0-15.0.1, 14,1.0-14.1.0.6, 14.0.0-14.0.0.4, 13.0.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5. In BIG-IP APM...

CVE-2019-6656

CVE-2019-6656 — Summary (concrete details from connected docs) Affected: BIG-IP APM Edge Client prior to 7.1.8 (7180.2019.508.705) and vulnerable client bundles across BIG-IP APM versions 11.5.1–15.0.1. In BIG-IP APM 13.1.0 and later, APM Client components can be updated independently from the BI...

F5 Networks BIG-IP : BIG-IP APM Edge Client vulnerability (K51220077)

The BIG-IP APM Edge Clientcomponent loads the policy library with user permission and bypassing the endpoint checks. CVE-2018-15316 Impact A malicious user can exploit this vulnerability on the APM Edge Clientby injecting a library file which will be loaded by the policy server and bypass the...

CVE-2018-15316

The CVE-2018-15316 issue affects BIG-IP APM Edge Client where the policy library is loaded with user permission, bypassing endpoint checks. Affected are: BIG-IP APM 13.0.0–13.1.1.1 , APM Client 7.1.5–7.1.6 , and Edge Client 7101–7160 . The underlying cause is loading a library into the policy ser...

F5 Networks BIG-IP Edge Client: session ID vulnerability (K06635145)

The version of the Big-IP Edge Client installed on the remote Windows host is in the range 7071.x through 7132.x. It is, therefore, affected by a flaw in the BIG-IP Edge Client that exposes the current session ID as part of the request URI when sending Keep-Alive requests over an SSL channel. Thi...

F5 BIG-IP Edge Client - Exported components, KeyStore usage, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application F5 BIG-IP Edge Client published at the 'play' market has multiple vulnerabilities...

F5 Networks BIG-IP : BIG-IP Edge and FirePass client information leakage vulnerability (SOL14969)

A flaw in BIG-IP APM or FirePass client-side F5-signed Edge Client and FirePass legacy client components for Windows platforms may allow information to leak from memory. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP...

CVE-2013-6024

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors...

Information disclosure

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors...

CVE-2013-6024

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors...