BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access to AOM via an (1) expired or (2) default password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_domain_name_system | F5 | 12.0.0 (including) | 12.0.0 (including) |