CVE Vulnerabilities

CVE-2017-0301

Published: Dec 21, 2017 | Modified: Oct 03, 2019
CVSS 3.x
7.6
HIGH
Source:
NVD
CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 2.x
4 MEDIUM
AV:A/AC:H/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected.

Affected Software

Name Vendor Start Version End Version
Big-ip_access_policy_manager F5 11.5.0 (including) 11.5.0 (including)
Big-ip_access_policy_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_access_policy_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_access_policy_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_access_policy_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_access_policy_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_access_policy_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_access_policy_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_access_policy_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_access_policy_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_access_policy_manager F5 12.1.2 (including) 12.1.2 (including)

References