CVE-2017-6165

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
f5big-ip_access_policy_manager
11.5.1
f5big-ip_access_policy_manager
11.5.2
f5big-ip_access_policy_manager
11.5.3
f5big-ip_access_policy_manager
11.5.4
f5big-ip_access_policy_manager
11.6.0
f5big-ip_access_policy_manager
11.6.1
f5big-ip_access_policy_manager
12.0.0
f5big-ip_access_policy_manager
12.1.0
f5big-ip_access_policy_manager
12.1.1
f5big-ip_access_policy_manager
12.1.2
f5big-ip_advanced_firewall_manager
11.5.1
f5big-ip_advanced_firewall_manager
11.5.2
f5big-ip_advanced_firewall_manager
11.5.3
f5big-ip_advanced_firewall_manager
11.5.4
f5big-ip_advanced_firewall_manager
11.6.0
f5big-ip_advanced_firewall_manager
11.6.1
f5big-ip_advanced_firewall_manager
12.0.0
f5big-ip_advanced_firewall_manager
12.1.0
f5big-ip_advanced_firewall_manager
12.1.1
f5big-ip_advanced_firewall_manager
12.1.2
f5big-ip_analytics
11.5.1
f5big-ip_analytics
11.5.2
f5big-ip_analytics
11.5.3
f5big-ip_analytics
11.5.4
f5big-ip_analytics
11.6.0
f5big-ip_analytics
11.6.1
f5big-ip_analytics
12.0.0
f5big-ip_analytics
12.1.0
f5big-ip_analytics
12.1.1
f5big-ip_analytics
12.2.0
f5big-ip_application_acceleration_manager
11.5.1
f5big-ip_application_acceleration_manager
11.5.2
f5big-ip_application_acceleration_manager
11.5.3
f5big-ip_application_acceleration_manager
11.5.4
f5big-ip_application_acceleration_manager
11.6.0
f5big-ip_application_acceleration_manager
11.6.1
f5big-ip_application_acceleration_manager
12.0.0
f5big-ip_application_acceleration_manager
12.1.0
f5big-ip_application_acceleration_manager
12.1.1
f5big-ip_application_acceleration_manager
12.1.2
f5big-ip_application_security_manager
11.5.1
f5big-ip_application_security_manager
11.5.2
f5big-ip_application_security_manager
11.5.3
f5big-ip_application_security_manager
11.5.4
f5big-ip_application_security_manager
11.6.0
f5big-ip_application_security_manager
11.6.1
f5big-ip_application_security_manager
12.0.0
f5big-ip_application_security_manager
12.1.0
f5big-ip_application_security_manager
12.1.1
f5big-ip_application_security_manager
12.1.2
f5big-ip_domain_name_system
11.5.1
f5big-ip_domain_name_system
11.5.2
f5big-ip_domain_name_system
11.5.3
f5big-ip_domain_name_system
11.5.4
f5big-ip_domain_name_system
11.6.0
f5big-ip_domain_name_system
11.6.1
f5big-ip_domain_name_system
12.0.0
f5big-ip_domain_name_system
12.1.0
f5big-ip_domain_name_system
12.1.1
f5big-ip_domain_name_system
12.1.2
f5big-ip_global_traffic_manager
11.5.1
f5big-ip_global_traffic_manager
11.5.2
f5big-ip_global_traffic_manager
11.5.3
f5big-ip_global_traffic_manager
11.5.4
f5big-ip_global_traffic_manager
11.6.0
f5big-ip_global_traffic_manager
11.6.1
f5big-ip_global_traffic_manager
12.0.0
f5big-ip_global_traffic_manager
12.1.0
f5big-ip_global_traffic_manager
12.1.1
f5big-ip_global_traffic_manager
12.1.2
f5big-ip_link_controller
11.5.1
f5big-ip_link_controller
11.5.2
f5big-ip_link_controller
11.5.3
f5big-ip_link_controller
11.5.4
f5big-ip_link_controller
11.6.0
f5big-ip_link_controller
11.6.1
f5big-ip_link_controller
12.0.0
f5big-ip_link_controller
12.1.0
f5big-ip_link_controller
12.1.1
f5big-ip_link_controller
12.1.2
f5big-ip_local_traffic_manager
11.5.1
f5big-ip_local_traffic_manager
11.5.2
f5big-ip_local_traffic_manager
11.5.3
f5big-ip_local_traffic_manager
11.5.4
f5big-ip_local_traffic_manager
11.6.0
f5big-ip_local_traffic_manager
11.6.1
f5big-ip_local_traffic_manager
12.0.0
f5big-ip_local_traffic_manager
12.1.0
f5big-ip_local_traffic_manager
12.1.1
f5big-ip_local_traffic_manager
12.1.2
f5big-ip_policy_enforcement_manager
11.5.1
f5big-ip_policy_enforcement_manager
11.5.2
f5big-ip_policy_enforcement_manager
11.5.3
f5big-ip_policy_enforcement_manager
11.5.4
f5big-ip_policy_enforcement_manager
11.6.0
f5big-ip_policy_enforcement_manager
11.6.1
f5big-ip_policy_enforcement_manager
12.0.0
f5big-ip_policy_enforcement_manager
12.1.0
f5big-ip_policy_enforcement_manager
12.1.1
f5big-ip_policy_enforcement_manager
12.1.2
f5big-ip_websafe
11.5.1
f5big-ip_websafe
11.5.2
f5big-ip_websafe
11.5.3
f5big-ip_websafe
11.5.4
f5big-ip_websafe
11.6.0
f5big-ip_websafe
11.6.1
f5big-ip_websafe
12.0.0
f5big-ip_websafe
12.1.0
f5big-ip_websafe
12.1.1
f5big-ip_websafe
12.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/101543
http://www.securitytracker.com/id/1039638
https://support.f5.com/csp/article/K74759095
http://www.securityfocus.com/bid/101543
http://www.securitytracker.com/id/1039638
https://support.f5.com/csp/article/K74759095