F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
f5 big-ip websafe 11.5.4 |
||
f5 big-ip websafe 11.6.0 |
||
f5 big-ip policy enforcement manager 11.5.2 |
||
f5 big-ip policy enforcement manager 11.5.1 |
||
f5 big-ip application security manager 11.5.4 |
||
f5 big-ip application security manager 11.6.0 |
||
f5 big-ip access policy manager 11.5.4 |
||
f5 big-ip link controller 11.6.1 |
||
f5 big-ip analytics 11.5.4 |
||
f5 big-ip analytics 11.6.0 |
||
f5 big-ip advanced firewall manager 11.5.4 |
||
f5 big-ip advanced firewall manager 11.6.0 |
||
f5 big-ip application acceleration manager 11.5.4 |
||
f5 big-ip application acceleration manager 11.6.0 |
||
f5 big-ip application acceleration manager 12.0.0 |
||
f5 big-ip local traffic manager 11.6.0 |
||
f5 big-ip local traffic manager 12.0.0 |
||
f5 big-ip global traffic manager 11.5.0 |
||
f5 big-ip link controller 11.5.0 |
||
f5 big-ip websafe 11.5.2 |
||
f5 big-ip websafe 11.5.3 |
||
f5 big-ip policy enforcement manager 11.5.4 |
||
f5 big-ip policy enforcement manager 11.5.3 |
||
f5 big-ip application security manager 11.5.2 |
||
f5 big-ip application security manager 11.5.3 |
||
f5 big-ip access policy manager 11.5.2 |
||
f5 big-ip access policy manager 11.5.3 |
||
f5 big-ip analytics 11.5.2 |
||
f5 big-ip analytics 11.5.3 |
||
f5 big-ip advanced firewall manager 11.5.2 |
||
f5 big-ip advanced firewall manager 11.5.3 |
||
f5 big-ip application acceleration manager 11.5.2 |
||
f5 big-ip application acceleration manager 11.5.3 |
||
f5 big-ip local traffic manager 11.5.3 |
||
f5 big-ip local traffic manager 11.5.4 |
||
f5 big-ip global traffic manager 11.5.2 |
||
f5 big-ip global traffic manager 11.5.1 |
||
f5 big-ip link controller 11.6.0 |
||
f5 big-ip link controller 12.0.0 |
||
f5 big-ip domain name system 12.0.0 |
||
f5 big-ip websafe 11.6.1 |
||
f5 big-ip websafe 12.0.0 |
||
f5 big-ip policy enforcement manager 11.5.0 |
||
f5 big-ip application security manager 11.6.1 |
||
f5 big-ip application security manager 12.0.0 |
||
f5 big-ip access policy manager 11.6.1 |
||
f5 big-ip access policy manager 11.6.0 |
||
f5 big-ip access policy manager 12.0.0 |
||
f5 big-ip analytics 11.6.1 |
||
f5 big-ip analytics 12.0.0 |
||
f5 big-ip advanced firewall manager 11.6.1 |
||
f5 big-ip advanced firewall manager 12.0.0 |
||
f5 big-ip application acceleration manager 11.6.1 |
||
f5 big-ip local traffic manager 11.6.1 |
||
f5 big-ip local traffic manager 11.5.0 |
||
f5 big-ip global traffic manager 11.6.1 |
||
f5 big-ip global traffic manager 11.6.0 |
||
f5 big-ip link controller 11.5.1 |
||
f5 big-ip link controller 11.5.2 |
||
f5 big-ip websafe 11.5.0 |
||
f5 big-ip websafe 11.5.1 |
||
f5 big-ip policy enforcement manager 11.6.1 |
||
f5 big-ip policy enforcement manager 12.0.0 |
||
f5 big-ip policy enforcement manager 11.6.0 |
||
f5 big-ip application security manager 11.5.0 |
||
f5 big-ip application security manager 11.5.1 |
||
f5 big-ip access policy manager 11.5.0 |
||
f5 big-ip access policy manager 11.5.1 |
||
f5 big-ip analytics 11.5.0 |
||
f5 big-ip analytics 11.5.1 |
||
f5 big-ip advanced firewall manager 11.5.0 |
||
f5 big-ip advanced firewall manager 11.5.1 |
||
f5 big-ip application acceleration manager 11.5.0 |
||
f5 big-ip application acceleration manager 11.5.1 |
||
f5 big-ip local traffic manager 11.5.1 |
||
f5 big-ip local traffic manager 11.5.2 |
||
f5 big-ip global traffic manager 11.5.4 |
||
f5 big-ip global traffic manager 11.5.3 |
||
f5 big-ip link controller 11.5.3 |
||
f5 big-ip link controller 11.5.4 |
Vulmon