Orta CVSS 4.9
CVE-2026-41954: Big-ip Access Policy Manager: hassas bilgi ifşası
Açıklama (NVD)
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Özet bilgiler
- Ürün
- F5 Big-ip Access Policy Manager
- CVSS v3.1
- 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - CVSS v4.0
- 6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- %0,29 (yüzdelik 22)
- CWE
- CWE-200
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| f5-big-ip-access-policy-manager | 17.1.0 | 17.1.3 | — |
| f5-big-ip-access-policy-manager | 17.5.0 | 17.5.1 | — |
| f5-big-ip-advanced-firewall-manager | 17.1.0 | 17.1.3 | — |
| f5-big-ip-advanced-firewall-manager | 17.5.0 | 17.5.1 | — |
| f5-big-ip-advanced-web-application-firewall | 17.1.0 | 17.1.3 | — |
| f5-big-ip-advanced-web-application-firewall | 17.5.0 | 17.5.1 | — |
| f5-big-ip-analytics | 17.1.0 | 17.1.3 | — |
| f5-big-ip-analytics | 17.5.0 | 17.5.1 | — |
| f5-big-ip-application-acceleration-manager | 17.1.0 | 17.1.3 | — |
| f5-big-ip-application-acceleration-manager | 17.5.0 | 17.5.1 | — |
| f5-big-ip-application-security-manager | 17.1.0 | 17.1.3 | — |
| f5-big-ip-application-security-manager | 17.5.0 | 17.5.1 | — |
| f5-big-ip-application-visibility-and-reporting | 17.1.0 | 17.1.3 | — |
| f5-big-ip-application-visibility-and-reporting | 17.5.0 | 17.5.1 | — |
| f5-big-ip-automation-toolchain | 17.1.0 | 17.1.3 | — |
| f5-big-ip-automation-toolchain | 17.5.0 | 17.5.1 | — |
| f5-big-ip-carrier-grade-nat | 17.1.0 | 17.1.3 | — |
| f5-big-ip-carrier-grade-nat | 17.5.0 | 17.5.1 | — |
| f5-big-ip-container-ingress-services | 17.1.0 | 17.1.3 | — |
| f5-big-ip-container-ingress-services | 17.5.0 | 17.5.1 | — |
| f5-big-ip-ddos-hybrid-defender | 17.1.0 | 17.1.3 | — |
| f5-big-ip-ddos-hybrid-defender | 17.5.0 | 17.5.1 | — |
| f5-big-ip-domain-name-system | 17.1.0 | 17.1.3 | — |
| f5-big-ip-domain-name-system | 17.5.0 | 17.5.1 | — |
| f5-big-ip-edge-gateway | 17.1.0 | 17.1.3 | — |
| f5-big-ip-edge-gateway | 17.5.0 | 17.5.1 | — |
| f5-big-ip-fraud-protection-service | 17.1.0 | 17.1.3 | — |
| f5-big-ip-fraud-protection-service | 17.5.0 | 17.5.1 | — |
| f5-big-ip-global-traffic-manager | 17.1.0 | 17.1.3 | — |
| f5-big-ip-global-traffic-manager | 17.5.0 | 17.5.1 | — |