CVE-2016-1497 Information

Description

The Configuration utility in F5 BIG-IP systems 11.0.x 11.1.x 11.2.x before 11.2.1 HF16 11.3.x 11.4.x before 11.4.1 HF10 11.5.x before 11.5.4 HF2 1.6.x before 11.6.1 and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Reference

http://www.securityfocus.com/bid/92671 http://www.securitytracker.com/id/1036631 https://support.f5.com/kb/en-us/solutions/public/k/31/sol31925518.html

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction Required

HIGH

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

NONE

Base Severity

4.9