CVE Vulnerabilities

CVE-2023-43485

Insertion of Sensitive Information into Log File

Published: Oct 10, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Big-iq_centralized_management F5 8.0.0 (including) 8.2.0.1.0.13.97-eng (excluding)
Big-iq_centralized_management F5 8.3.0 (including) 8.3.0.0.12.118-eng (excluding)

Potential Mitigations

References