Vulnerability in F5 Big-ip_access_policy_manager
CVE-2016-5700
Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality…
EPSS: 0.056 (90.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- F5 Big-ip_access_policy_manager — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_advanced_firewall_manager — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_application_acceleration_manager — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_application_security_manager — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_link_controller — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_local_traffic_manager — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_policy_enforcement_manager — versions 11.5.0, 11.5.1, 11.5.2
- F5 Big-ip_websafe — versions 11.6.0, 11.6.1, 12.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- 93325 (vdb-entry, x_refsource_BID)
- 1036928 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-5700?
- CVE-2016-5700 is a critical-severity vulnerability in F5 Big-ip_access_policy_manager, classified under Improper Access Control. CVSS score: 9.8/10. Published 2016-10-03.
- How severe is CVE-2016-5700?
- Critical severity. CVSS v3 base score is 9.8 out of 10.