On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address of a peer, adding a new peer, or when the Traffic Management Microkernel (TMM) first starts up.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_access_policy_manager | F5 | 11.6.1 (including) | 11.6.5.1 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.0 (including) | 12.1.5.1 (including) |
| Big-ip_access_policy_manager | F5 | 13.1.0 (including) | 13.1.3.3 (including) |
| Big-ip_access_policy_manager | F5 | 14.1.0 (including) | 14.1.2.3 (including) |
| Big-ip_access_policy_manager | F5 | 15.0.0 (including) | 15.1.0.3 (including) |