Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-6165

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.

Published

2017-10-20T15:29:00.537

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-532

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	f5	big-ip_access_policy_manager	11.5.1	Yes
Application	f5	big-ip_access_policy_manager	11.5.2	Yes
Application	f5	big-ip_access_policy_manager	11.5.3	Yes
Application	f5	big-ip_access_policy_manager	11.5.4	Yes
Application	f5	big-ip_access_policy_manager	11.6.0	Yes
Application	f5	big-ip_access_policy_manager	11.6.1	Yes
Application	f5	big-ip_access_policy_manager	12.0.0	Yes
Application	f5	big-ip_access_policy_manager	12.1.0	Yes
Application	f5	big-ip_access_policy_manager	12.1.1	Yes
Application	f5	big-ip_access_policy_manager	12.1.2	Yes
Application	f5	big-ip_advanced_firewall_manager	11.5.1	Yes
Application	f5	big-ip_advanced_firewall_manager	11.5.2	Yes
Application	f5	big-ip_advanced_firewall_manager	11.5.3	Yes
Application	f5	big-ip_advanced_firewall_manager	11.5.4	Yes
Application	f5	big-ip_advanced_firewall_manager	11.6.0	Yes
Application	f5	big-ip_advanced_firewall_manager	11.6.1	Yes
Application	f5	big-ip_advanced_firewall_manager	12.0.0	Yes
Application	f5	big-ip_advanced_firewall_manager	12.1.0	Yes
Application	f5	big-ip_advanced_firewall_manager	12.1.1	Yes
Application	f5	big-ip_advanced_firewall_manager	12.1.2	Yes
Application	f5	big-ip_analytics	11.5.1	Yes
Application	f5	big-ip_analytics	11.5.2	Yes
Application	f5	big-ip_analytics	11.5.3	Yes
Application	f5	big-ip_analytics	11.5.4	Yes
Application	f5	big-ip_analytics	11.6.0	Yes
Application	f5	big-ip_analytics	11.6.1	Yes
Application	f5	big-ip_analytics	12.0.0	Yes
Application	f5	big-ip_analytics	12.1.0	Yes
Application	f5	big-ip_analytics	12.1.1	Yes
Application	f5	big-ip_analytics	12.2.0	Yes
Application	f5	big-ip_application_acceleration_manager	11.5.1	Yes
Application	f5	big-ip_application_acceleration_manager	11.5.2	Yes
Application	f5	big-ip_application_acceleration_manager	11.5.3	Yes
Application	f5	big-ip_application_acceleration_manager	11.5.4	Yes
Application	f5	big-ip_application_acceleration_manager	11.6.0	Yes
Application	f5	big-ip_application_acceleration_manager	11.6.1	Yes
Application	f5	big-ip_application_acceleration_manager	12.0.0	Yes
Application	f5	big-ip_application_acceleration_manager	12.1.0	Yes
Application	f5	big-ip_application_acceleration_manager	12.1.1	Yes
Application	f5	big-ip_application_acceleration_manager	12.1.2	Yes
Application	f5	big-ip_application_security_manager	11.5.1	Yes
Application	f5	big-ip_application_security_manager	11.5.2	Yes
Application	f5	big-ip_application_security_manager	11.5.3	Yes
Application	f5	big-ip_application_security_manager	11.5.4	Yes
Application	f5	big-ip_application_security_manager	11.6.0	Yes
Application	f5	big-ip_application_security_manager	11.6.1	Yes
Application	f5	big-ip_application_security_manager	12.0.0	Yes
Application	f5	big-ip_application_security_manager	12.1.0	Yes
Application	f5	big-ip_application_security_manager	12.1.1	Yes
Application	f5	big-ip_application_security_manager	12.1.2	Yes
Application	f5	big-ip_domain_name_system	11.5.1	Yes
Application	f5	big-ip_domain_name_system	11.5.2	Yes
Application	f5	big-ip_domain_name_system	11.5.3	Yes
Application	f5	big-ip_domain_name_system	11.5.4	Yes
Application	f5	big-ip_domain_name_system	11.6.0	Yes
Application	f5	big-ip_domain_name_system	11.6.1	Yes
Application	f5	big-ip_domain_name_system	12.0.0	Yes
Application	f5	big-ip_domain_name_system	12.1.0	Yes
Application	f5	big-ip_domain_name_system	12.1.1	Yes
Application	f5	big-ip_domain_name_system	12.1.2	Yes
Application	f5	big-ip_global_traffic_manager	11.5.1	Yes
Application	f5	big-ip_global_traffic_manager	11.5.2	Yes
Application	f5	big-ip_global_traffic_manager	11.5.3	Yes
Application	f5	big-ip_global_traffic_manager	11.5.4	Yes
Application	f5	big-ip_global_traffic_manager	11.6.0	Yes
Application	f5	big-ip_global_traffic_manager	11.6.1	Yes
Application	f5	big-ip_global_traffic_manager	12.0.0	Yes
Application	f5	big-ip_global_traffic_manager	12.1.0	Yes
Application	f5	big-ip_global_traffic_manager	12.1.1	Yes
Application	f5	big-ip_global_traffic_manager	12.1.2	Yes
Application	f5	big-ip_link_controller	11.5.1	Yes
Application	f5	big-ip_link_controller	11.5.2	Yes
Application	f5	big-ip_link_controller	11.5.3	Yes
Application	f5	big-ip_link_controller	11.5.4	Yes
Application	f5	big-ip_link_controller	11.6.0	Yes
Application	f5	big-ip_link_controller	11.6.1	Yes
Application	f5	big-ip_link_controller	12.0.0	Yes
Application	f5	big-ip_link_controller	12.1.0	Yes
Application	f5	big-ip_link_controller	12.1.1	Yes
Application	f5	big-ip_link_controller	12.1.2	Yes
Application	f5	big-ip_local_traffic_manager	11.5.1	Yes
Application	f5	big-ip_local_traffic_manager	11.5.2	Yes
Application	f5	big-ip_local_traffic_manager	11.5.3	Yes
Application	f5	big-ip_local_traffic_manager	11.5.4	Yes
Application	f5	big-ip_local_traffic_manager	11.6.0	Yes
Application	f5	big-ip_local_traffic_manager	11.6.1	Yes
Application	f5	big-ip_local_traffic_manager	12.0.0	Yes
Application	f5	big-ip_local_traffic_manager	12.1.0	Yes
Application	f5	big-ip_local_traffic_manager	12.1.1	Yes
Application	f5	big-ip_local_traffic_manager	12.1.2	Yes
Application	f5	big-ip_policy_enforcement_manager	11.5.1	Yes
Application	f5	big-ip_policy_enforcement_manager	11.5.2	Yes
Application	f5	big-ip_policy_enforcement_manager	11.5.3	Yes
Application	f5	big-ip_policy_enforcement_manager	11.5.4	Yes
Application	f5	big-ip_policy_enforcement_manager	11.6.0	Yes
Application	f5	big-ip_policy_enforcement_manager	11.6.1	Yes
Application	f5	big-ip_policy_enforcement_manager	12.0.0	Yes
Application	f5	big-ip_policy_enforcement_manager	12.1.0	Yes
Application	f5	big-ip_policy_enforcement_manager	12.1.1	Yes
Application	f5	big-ip_policy_enforcement_manager	12.1.2	Yes
Application	f5	big-ip_websafe	11.5.1	Yes
Application	f5	big-ip_websafe	11.5.2	Yes
Application	f5	big-ip_websafe	11.5.3	Yes
Application	f5	big-ip_websafe	11.5.4	Yes
Application	f5	big-ip_websafe	11.6.0	Yes
Application	f5	big-ip_websafe	11.6.1	Yes
Application	f5	big-ip_websafe	12.0.0	Yes
Application	f5	big-ip_websafe	12.1.0	Yes
Application	f5	big-ip_websafe	12.1.1	Yes
Application	f5	big-ip_websafe	12.1.2	Yes
Hardware	f5	viprion_application_delivery_controller	-	No

References

http://www.securityfocus.com/bid/101543 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1039638 Third Party Advisory, VDB Entry ([email protected])
https://support.f5.com/csp/article/K74759095 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/101543 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1039638 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://support.f5.com/csp/article/K74759095 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)