CVE-2016-2084

Опубликовано: 13 апр. 2016

Источник: nvd

CVSS3: 7.4

CVSS2: 4

EPSS Низкий

Описание

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to obtain

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:*

Конфигурация 7

cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:*

Конфигурация 8

Одно из

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*

Конфигурация 9

Одно из

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*

Конфигурация 10

Одно из

cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:*

Конфигурация 11

cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:*

Конфигурация 12

Одно из

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*

Конфигурация 13

cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:*

Конфигурация 14

Одно из

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*

Конфигурация 15

Одно из

cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*

Конфигурация 16

Одно из

cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*

Конфигурация 17

Одно из

cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*

cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*

Конфигурация 18

cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00483

Низкий

7.4 High

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-wm5h-q493-j5m6

CVSS3: 7.4

github

больше 3 лет назад

EPSS

Процентиль: 65%

0.00483

Низкий

7.4 High

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200