Description (CNA)
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to encrypted configuration and/or UCS files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| F5 / BIG-IP | affected BIG-IP 14.1.0-14.1.0.5; affected 14.0.0-14.0.0.4; affected 13.0.0-13.1.1.4; affected 12.1.0-12.1.4 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.