CVE Vulnerabilities

CVE-2017-6165

Insertion of Sensitive Information into Log File

Published: Oct 20, 2017 | Modified: Apr 20, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the /var/log/ltm log file.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Big-ip_access_policy_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_access_policy_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_access_policy_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_access_policy_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_access_policy_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_access_policy_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_access_policy_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_access_policy_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_access_policy_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_access_policy_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_advanced_firewall_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_advanced_firewall_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_advanced_firewall_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_advanced_firewall_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_advanced_firewall_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_advanced_firewall_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_advanced_firewall_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_advanced_firewall_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_advanced_firewall_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_advanced_firewall_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_analytics F5 11.5.1 (including) 11.5.1 (including)
Big-ip_analytics F5 11.5.2 (including) 11.5.2 (including)
Big-ip_analytics F5 11.5.3 (including) 11.5.3 (including)
Big-ip_analytics F5 11.5.4 (including) 11.5.4 (including)
Big-ip_analytics F5 11.6.0 (including) 11.6.0 (including)
Big-ip_analytics F5 11.6.1 (including) 11.6.1 (including)
Big-ip_analytics F5 12.0.0 (including) 12.0.0 (including)
Big-ip_analytics F5 12.1.0 (including) 12.1.0 (including)
Big-ip_analytics F5 12.1.1 (including) 12.1.1 (including)
Big-ip_analytics F5 12.2.0 (including) 12.2.0 (including)
Big-ip_application_acceleration_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_application_acceleration_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_application_acceleration_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_application_acceleration_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_application_acceleration_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_application_acceleration_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_application_acceleration_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_application_acceleration_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_application_acceleration_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_application_acceleration_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_application_security_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_application_security_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_application_security_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_application_security_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_application_security_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_application_security_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_application_security_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_application_security_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_application_security_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_application_security_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_domain_name_system F5 11.5.1 (including) 11.5.1 (including)
Big-ip_domain_name_system F5 11.5.2 (including) 11.5.2 (including)
Big-ip_domain_name_system F5 11.5.3 (including) 11.5.3 (including)
Big-ip_domain_name_system F5 11.5.4 (including) 11.5.4 (including)
Big-ip_domain_name_system F5 11.6.0 (including) 11.6.0 (including)
Big-ip_domain_name_system F5 11.6.1 (including) 11.6.1 (including)
Big-ip_domain_name_system F5 12.0.0 (including) 12.0.0 (including)
Big-ip_domain_name_system F5 12.1.0 (including) 12.1.0 (including)
Big-ip_domain_name_system F5 12.1.1 (including) 12.1.1 (including)
Big-ip_domain_name_system F5 12.1.2 (including) 12.1.2 (including)
Big-ip_global_traffic_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_global_traffic_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_global_traffic_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_global_traffic_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_global_traffic_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_global_traffic_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_global_traffic_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_global_traffic_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_global_traffic_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_global_traffic_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_link_controller F5 11.5.1 (including) 11.5.1 (including)
Big-ip_link_controller F5 11.5.2 (including) 11.5.2 (including)
Big-ip_link_controller F5 11.5.3 (including) 11.5.3 (including)
Big-ip_link_controller F5 11.5.4 (including) 11.5.4 (including)
Big-ip_link_controller F5 11.6.0 (including) 11.6.0 (including)
Big-ip_link_controller F5 11.6.1 (including) 11.6.1 (including)
Big-ip_link_controller F5 12.0.0 (including) 12.0.0 (including)
Big-ip_link_controller F5 12.1.0 (including) 12.1.0 (including)
Big-ip_link_controller F5 12.1.1 (including) 12.1.1 (including)
Big-ip_link_controller F5 12.1.2 (including) 12.1.2 (including)
Big-ip_local_traffic_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_local_traffic_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_local_traffic_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_local_traffic_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_local_traffic_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_local_traffic_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_local_traffic_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_local_traffic_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_local_traffic_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_local_traffic_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_policy_enforcement_manager F5 11.5.1 (including) 11.5.1 (including)
Big-ip_policy_enforcement_manager F5 11.5.2 (including) 11.5.2 (including)
Big-ip_policy_enforcement_manager F5 11.5.3 (including) 11.5.3 (including)
Big-ip_policy_enforcement_manager F5 11.5.4 (including) 11.5.4 (including)
Big-ip_policy_enforcement_manager F5 11.6.0 (including) 11.6.0 (including)
Big-ip_policy_enforcement_manager F5 11.6.1 (including) 11.6.1 (including)
Big-ip_policy_enforcement_manager F5 12.0.0 (including) 12.0.0 (including)
Big-ip_policy_enforcement_manager F5 12.1.0 (including) 12.1.0 (including)
Big-ip_policy_enforcement_manager F5 12.1.1 (including) 12.1.1 (including)
Big-ip_policy_enforcement_manager F5 12.1.2 (including) 12.1.2 (including)
Big-ip_websafe F5 11.5.1 (including) 11.5.1 (including)
Big-ip_websafe F5 11.5.2 (including) 11.5.2 (including)
Big-ip_websafe F5 11.5.3 (including) 11.5.3 (including)
Big-ip_websafe F5 11.5.4 (including) 11.5.4 (including)
Big-ip_websafe F5 11.6.0 (including) 11.6.0 (including)
Big-ip_websafe F5 11.6.1 (including) 11.6.1 (including)
Big-ip_websafe F5 12.0.0 (including) 12.0.0 (including)
Big-ip_websafe F5 12.1.0 (including) 12.1.0 (including)
Big-ip_websafe F5 12.1.1 (including) 12.1.1 (including)
Big-ip_websafe F5 12.1.2 (including) 12.1.2 (including)

Potential Mitigations

References