In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the /var/log/ltm log file.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_access_policy_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_access_policy_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_access_policy_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_access_policy_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_access_policy_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_access_policy_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_access_policy_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_advanced_firewall_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_analytics | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_analytics | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_analytics | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_analytics | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_analytics | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_analytics | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_analytics | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_analytics | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_analytics | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_analytics | F5 | 12.2.0 (including) | 12.2.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_application_acceleration_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_application_security_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_application_security_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_application_security_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_application_security_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_application_security_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_application_security_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_application_security_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_application_security_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_application_security_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_application_security_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_domain_name_system | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_domain_name_system | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_domain_name_system | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_domain_name_system | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_domain_name_system | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_domain_name_system | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_domain_name_system | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_domain_name_system | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_domain_name_system | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_domain_name_system | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_global_traffic_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_global_traffic_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_global_traffic_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_global_traffic_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_global_traffic_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_global_traffic_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_global_traffic_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_link_controller | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_link_controller | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_link_controller | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_link_controller | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_link_controller | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_link_controller | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_link_controller | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_link_controller | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_link_controller | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_link_controller | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_local_traffic_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_local_traffic_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_local_traffic_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_local_traffic_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_local_traffic_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_local_traffic_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_policy_enforcement_manager | F5 | 12.1.2 (including) | 12.1.2 (including) |
| Big-ip_websafe | F5 | 11.5.1 (including) | 11.5.1 (including) |
| Big-ip_websafe | F5 | 11.5.2 (including) | 11.5.2 (including) |
| Big-ip_websafe | F5 | 11.5.3 (including) | 11.5.3 (including) |
| Big-ip_websafe | F5 | 11.5.4 (including) | 11.5.4 (including) |
| Big-ip_websafe | F5 | 11.6.0 (including) | 11.6.0 (including) |
| Big-ip_websafe | F5 | 11.6.1 (including) | 11.6.1 (including) |
| Big-ip_websafe | F5 | 12.0.0 (including) | 12.0.0 (including) |
| Big-ip_websafe | F5 | 12.1.0 (including) | 12.1.0 (including) |
| Big-ip_websafe | F5 | 12.1.1 (including) | 12.1.1 (including) |
| Big-ip_websafe | F5 | 12.1.2 (including) | 12.1.2 (including) |