Description (CNA)
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| F5 / BIG-IP | unaffected 21.1.0 before *; affected 21.0.0 before 21.0.0.1; affected 17.5.0 before 17.5.1.4; affected 17.1.0 before 17.1.3.1; affected 16.1.0 before * |
| F5 / BIG-IQ | affected 8.4.0 before 8.4.1 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.
No references supplied.