CyberSec.Space Logo
Back to CVE Browser

CVE-2017-6165

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1880%
EPSS Percentile16.00th
PublishedOct 20, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.

Affected Platforms (CPE)

📦
F5

Big Ip Access Policy Manager

= 11.5.1
📦
F5

Big Ip Access Policy Manager

= 11.5.2
📦
F5

Big Ip Access Policy Manager

= 11.5.3
📦
F5

Big Ip Access Policy Manager

= 11.5.4
📦
F5

Big Ip Access Policy Manager

= 11.6.0
📦
F5

Big Ip Access Policy Manager

= 11.6.1
📦
F5

Big Ip Access Policy Manager

= 12.0.0
📦
F5

Big Ip Access Policy Manager

= 12.1.0
📦
F5

Big Ip Access Policy Manager

= 12.1.1
📦
F5

Big Ip Access Policy Manager

= 12.1.2
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.1
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.2
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.3
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.4
📦
F5

Big Ip Advanced Firewall Manager

= 11.6.0
📦
F5

Big Ip Advanced Firewall Manager

= 11.6.1
📦
F5

Big Ip Advanced Firewall Manager

= 12.0.0
📦
F5

Big Ip Advanced Firewall Manager

= 12.1.0
📦
F5

Big Ip Advanced Firewall Manager

= 12.1.1
📦
F5

Big Ip Advanced Firewall Manager

= 12.1.2
📦
F5

Big Ip Analytics

= 11.5.1
📦
F5

Big Ip Analytics

= 11.5.2
📦
F5

Big Ip Analytics

= 11.5.3
📦
F5

Big Ip Analytics

= 11.5.4
📦
F5

Big Ip Analytics

= 11.6.0
📦
F5

Big Ip Analytics

= 11.6.1
📦
F5

Big Ip Analytics

= 12.0.0
📦
F5

Big Ip Analytics

= 12.1.0
📦
F5

Big Ip Analytics

= 12.1.1
📦
F5

Big Ip Analytics

= 12.2.0
📦
F5

Big Ip Application Acceleration Manager

= 11.5.1
📦
F5

Big Ip Application Acceleration Manager

= 11.5.2
📦
F5

Big Ip Application Acceleration Manager

= 11.5.3
📦
F5

Big Ip Application Acceleration Manager

= 11.5.4
📦
F5

Big Ip Application Acceleration Manager

= 11.6.0
📦
F5

Big Ip Application Acceleration Manager

= 11.6.1
📦
F5

Big Ip Application Acceleration Manager

= 12.0.0
📦
F5

Big Ip Application Acceleration Manager

= 12.1.0
📦
F5

Big Ip Application Acceleration Manager

= 12.1.1
📦
F5

Big Ip Application Acceleration Manager

= 12.1.2
📦
F5

Big Ip Application Security Manager

= 11.5.1
📦
F5

Big Ip Application Security Manager

= 11.5.2
📦
F5

Big Ip Application Security Manager

= 11.5.3
📦
F5

Big Ip Application Security Manager

= 11.5.4
📦
F5

Big Ip Application Security Manager

= 11.6.0
📦
F5

Big Ip Application Security Manager

= 11.6.1
📦
F5

Big Ip Application Security Manager

= 12.0.0
📦
F5

Big Ip Application Security Manager

= 12.1.0
📦
F5

Big Ip Application Security Manager

= 12.1.1
📦
F5

Big Ip Application Security Manager

= 12.1.2
📦
F5

Big Ip Domain Name System

= 11.5.1
📦
F5

Big Ip Domain Name System

= 11.5.2
📦
F5

Big Ip Domain Name System

= 11.5.3
📦
F5

Big Ip Domain Name System

= 11.5.4
📦
F5

Big Ip Domain Name System

= 11.6.0
📦
F5

Big Ip Domain Name System

= 11.6.1
📦
F5

Big Ip Domain Name System

= 12.0.0
📦
F5

Big Ip Domain Name System

= 12.1.0
📦
F5

Big Ip Domain Name System

= 12.1.1
📦
F5

Big Ip Domain Name System

= 12.1.2
📦
F5

Big Ip Global Traffic Manager

= 11.5.1
📦
F5

Big Ip Global Traffic Manager

= 11.5.2
📦
F5

Big Ip Global Traffic Manager

= 11.5.3
📦
F5

Big Ip Global Traffic Manager

= 11.5.4
📦
F5

Big Ip Global Traffic Manager

= 11.6.0
📦
F5

Big Ip Global Traffic Manager

= 11.6.1
📦
F5

Big Ip Global Traffic Manager

= 12.0.0
📦
F5

Big Ip Global Traffic Manager

= 12.1.0
📦
F5

Big Ip Global Traffic Manager

= 12.1.1
📦
F5

Big Ip Global Traffic Manager

= 12.1.2
📦
F5

Big Ip Link Controller

= 11.5.1
📦
F5

Big Ip Link Controller

= 11.5.2
📦
F5

Big Ip Link Controller

= 11.5.3
📦
F5

Big Ip Link Controller

= 11.5.4
📦
F5

Big Ip Link Controller

= 11.6.0
📦
F5

Big Ip Link Controller

= 11.6.1
📦
F5

Big Ip Link Controller

= 12.0.0
📦
F5

Big Ip Link Controller

= 12.1.0
📦
F5

Big Ip Link Controller

= 12.1.1
📦
F5

Big Ip Link Controller

= 12.1.2
📦
F5

Big Ip Local Traffic Manager

= 11.5.1
📦
F5

Big Ip Local Traffic Manager

= 11.5.2
📦
F5

Big Ip Local Traffic Manager

= 11.5.3
📦
F5

Big Ip Local Traffic Manager

= 11.5.4
📦
F5

Big Ip Local Traffic Manager

= 11.6.0
📦
F5

Big Ip Local Traffic Manager

= 11.6.1
📦
F5

Big Ip Local Traffic Manager

= 12.0.0
📦
F5

Big Ip Local Traffic Manager

= 12.1.0
📦
F5

Big Ip Local Traffic Manager

= 12.1.1
📦
F5

Big Ip Local Traffic Manager

= 12.1.2
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.1
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.2
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.3
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.4
📦
F5

Big Ip Policy Enforcement Manager

= 11.6.0
📦
F5

Big Ip Policy Enforcement Manager

= 11.6.1
📦
F5

Big Ip Policy Enforcement Manager

= 12.0.0
📦
F5

Big Ip Policy Enforcement Manager

= 12.1.0
📦
F5

Big Ip Policy Enforcement Manager

= 12.1.1
📦
F5

Big Ip Policy Enforcement Manager

= 12.1.2
📦
F5

Big Ip Websafe

= 11.5.1
📦
F5

Big Ip Websafe

= 11.5.2
📦
F5

Big Ip Websafe

= 11.5.3
📦
F5

Big Ip Websafe

= 11.5.4
📦
F5

Big Ip Websafe

= 11.6.0
📦
F5

Big Ip Websafe

= 11.6.1
📦
F5

Big Ip Websafe

= 12.0.0
📦
F5

Big Ip Websafe

= 12.1.0
📦
F5

Big Ip Websafe

= 12.1.1
📦
F5

Big Ip Websafe

= 12.1.2

References & Advisories

🔗 http://www.securityfocus.com/bid/101543
🔗 http://www.securitytracker.com/id/1039638
🔗 https://support.f5.com/csp/article/K74759095
🔗 http://www.securityfocus.com/bid/101543
🔗 http://www.securitytracker.com/id/1039638
🔗 https://support.f5.com/csp/article/K74759095

Related Vulnerabilities

CVE-2019-66659.4

On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and...

CVE-2015-80227.5

The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x ...

CVE-2019-65956.1

Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI.

CVE-2016-14974.9

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5....