ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-1497

—
CVSS 3.0
4.9 medium
EPSS
2%p73
Published
()
Modified
Description

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.

Vendors
f5
Products
big-ip webaccelerator, big-ip link controller, big-ip access policy manager, big-ip application security manager, big-ip domain name system, big-ip global traffic manager, big-ip local traffic manager, big-ip application acceleration manager, big-ip protocol security module, big-ip analytics, big-ip advanced firewall manager, big-ip wan optimization manager
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news

No ingested article mentions this CVE yet.