Information disclosure in F5 Big-Ip Access Policy Manager
CVE-2013-6024
The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.
Vulnerability class: Information Disclosure
EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.
Affected products
- F5 Big-ip_access_policy_manager — versions 10.1.0, 10.2.4, 11.0.0
- F5 Big-ip_edge_gateway — versions 10.1.0, 10.2.4, 11.0.0
- F5 Firepass — versions 6.0.0, 6.1.0, 7.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (vdb-entry, x_refsource_BID)