CVE-2015-8611
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access to AOM via an (1) expired or (2) default password.
Affected Platforms (CPE)
📦
F5
Big Ip Domain Name System
= 12.0.0📦
F5
Big Ip Application Acceleration Manager
= 12.0.0📦
F5
Big Ip Link Controller
= 12.0.0📦
F5
Big Ip Policy Enforcement Manager
= 12.0.0📦
F5
Big Ip Advanced Firewall Manager
= 12.0.0📦
F5
Big Ip Local Traffic Manager
= 12.0.0📦
F5
Big Ip Access Policy Manager
= 12.0.0📦
F5
Big Ip Application Security Manager
= 12.0.0📦
F5