CVE Vulnerabilities

CVE-2023-39447

Insertion of Sensitive Information into Log File

Published: Oct 10, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log.  

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Big-ip_access_policy_managerF515.1.0 (including)15.1.8 (excluding)
Big-ip_access_policy_managerF516.1.0 (including)16.1.4 (excluding)
Big-ip_access_policy_managerF517.0.0 (including)17.0.0 (including)
Big-ip_guided_configurationF57.0 (including)7.7 (including)
Big-ip_guided_configurationF56.0 (including)6.0 (including)
Big-ip_guided_configurationF58.0 (including)8.0 (including)

Potential Mitigations

References