CyberSec.Space Logo
返回 CVE 浏览器

CVE-2017-6165

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1880%
EPSS Percentile16.00th
Published2017年10月20日
Last Modified2026年5月13日

Vulnerability Description

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.

Affected Platforms (CPE)

📦
F5

Big Ip Access Policy Manager

= 11.5.1
📦
F5

Big Ip Access Policy Manager

= 11.5.2
📦
F5

Big Ip Access Policy Manager

= 11.5.3
📦
F5

Big Ip Access Policy Manager

= 11.5.4
📦
F5

Big Ip Access Policy Manager

= 11.6.0
📦
F5

Big Ip Access Policy Manager

= 11.6.1
📦
F5

Big Ip Access Policy Manager

= 12.0.0
📦
F5

Big Ip Access Policy Manager

= 12.1.0
📦
F5

Big Ip Access Policy Manager

= 12.1.1
📦
F5

Big Ip Access Policy Manager

= 12.1.2
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.1
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.2
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.3
📦
F5

Big Ip Advanced Firewall Manager

= 11.5.4
📦
F5

Big Ip Advanced Firewall Manager

= 11.6.0
📦
F5

Big Ip Advanced Firewall Manager

= 11.6.1
📦
F5

Big Ip Advanced Firewall Manager

= 12.0.0
📦
F5

Big Ip Advanced Firewall Manager

= 12.1.0
📦
F5

Big Ip Advanced Firewall Manager

= 12.1.1
📦
F5

Big Ip Advanced Firewall Manager

= 12.1.2
📦
F5

Big Ip Analytics

= 11.5.1
📦
F5

Big Ip Analytics

= 11.5.2
📦
F5

Big Ip Analytics

= 11.5.3
📦
F5

Big Ip Analytics

= 11.5.4
📦
F5

Big Ip Analytics

= 11.6.0
📦
F5

Big Ip Analytics

= 11.6.1
📦
F5

Big Ip Analytics

= 12.0.0
📦
F5

Big Ip Analytics

= 12.1.0
📦
F5

Big Ip Analytics

= 12.1.1
📦
F5

Big Ip Analytics

= 12.2.0
📦
F5

Big Ip Application Acceleration Manager

= 11.5.1
📦
F5

Big Ip Application Acceleration Manager

= 11.5.2
📦
F5

Big Ip Application Acceleration Manager

= 11.5.3
📦
F5

Big Ip Application Acceleration Manager

= 11.5.4
📦
F5

Big Ip Application Acceleration Manager

= 11.6.0
📦
F5

Big Ip Application Acceleration Manager

= 11.6.1
📦
F5

Big Ip Application Acceleration Manager

= 12.0.0
📦
F5

Big Ip Application Acceleration Manager

= 12.1.0
📦
F5

Big Ip Application Acceleration Manager

= 12.1.1
📦
F5

Big Ip Application Acceleration Manager

= 12.1.2
📦
F5

Big Ip Application Security Manager

= 11.5.1
📦
F5

Big Ip Application Security Manager

= 11.5.2
📦
F5

Big Ip Application Security Manager

= 11.5.3
📦
F5

Big Ip Application Security Manager

= 11.5.4
📦
F5

Big Ip Application Security Manager

= 11.6.0
📦
F5

Big Ip Application Security Manager

= 11.6.1
📦
F5

Big Ip Application Security Manager

= 12.0.0
📦
F5

Big Ip Application Security Manager

= 12.1.0
📦
F5

Big Ip Application Security Manager

= 12.1.1
📦
F5

Big Ip Application Security Manager

= 12.1.2
📦
F5

Big Ip Domain Name System

= 11.5.1
📦
F5

Big Ip Domain Name System

= 11.5.2
📦
F5

Big Ip Domain Name System

= 11.5.3
📦
F5

Big Ip Domain Name System

= 11.5.4
📦
F5

Big Ip Domain Name System

= 11.6.0
📦
F5

Big Ip Domain Name System

= 11.6.1
📦
F5

Big Ip Domain Name System

= 12.0.0
📦
F5

Big Ip Domain Name System

= 12.1.0
📦
F5

Big Ip Domain Name System

= 12.1.1
📦
F5

Big Ip Domain Name System

= 12.1.2
📦
F5

Big Ip Global Traffic Manager

= 11.5.1
📦
F5

Big Ip Global Traffic Manager

= 11.5.2
📦
F5

Big Ip Global Traffic Manager

= 11.5.3
📦
F5

Big Ip Global Traffic Manager

= 11.5.4
📦
F5

Big Ip Global Traffic Manager

= 11.6.0
📦
F5

Big Ip Global Traffic Manager

= 11.6.1
📦
F5

Big Ip Global Traffic Manager

= 12.0.0
📦
F5

Big Ip Global Traffic Manager

= 12.1.0
📦
F5

Big Ip Global Traffic Manager

= 12.1.1
📦
F5

Big Ip Global Traffic Manager

= 12.1.2
📦
F5

Big Ip Link Controller

= 11.5.1
📦
F5

Big Ip Link Controller

= 11.5.2
📦
F5

Big Ip Link Controller

= 11.5.3
📦
F5

Big Ip Link Controller

= 11.5.4
📦
F5

Big Ip Link Controller

= 11.6.0
📦
F5

Big Ip Link Controller

= 11.6.1
📦
F5

Big Ip Link Controller

= 12.0.0
📦
F5

Big Ip Link Controller

= 12.1.0
📦
F5

Big Ip Link Controller

= 12.1.1
📦
F5

Big Ip Link Controller

= 12.1.2
📦
F5

Big Ip Local Traffic Manager

= 11.5.1
📦
F5

Big Ip Local Traffic Manager

= 11.5.2
📦
F5

Big Ip Local Traffic Manager

= 11.5.3
📦
F5

Big Ip Local Traffic Manager

= 11.5.4
📦
F5

Big Ip Local Traffic Manager

= 11.6.0
📦
F5

Big Ip Local Traffic Manager

= 11.6.1
📦
F5

Big Ip Local Traffic Manager

= 12.0.0
📦
F5

Big Ip Local Traffic Manager

= 12.1.0
📦
F5

Big Ip Local Traffic Manager

= 12.1.1
📦
F5

Big Ip Local Traffic Manager

= 12.1.2
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.1
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.2
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.3
📦
F5

Big Ip Policy Enforcement Manager

= 11.5.4
📦
F5

Big Ip Policy Enforcement Manager

= 11.6.0
📦
F5

Big Ip Policy Enforcement Manager

= 11.6.1
📦
F5

Big Ip Policy Enforcement Manager

= 12.0.0
📦
F5

Big Ip Policy Enforcement Manager

= 12.1.0
📦
F5

Big Ip Policy Enforcement Manager

= 12.1.1
📦
F5

Big Ip Policy Enforcement Manager

= 12.1.2
📦
F5

Big Ip Websafe

= 11.5.1
📦
F5

Big Ip Websafe

= 11.5.2
📦
F5

Big Ip Websafe

= 11.5.3
📦
F5

Big Ip Websafe

= 11.5.4
📦
F5

Big Ip Websafe

= 11.6.0
📦
F5

Big Ip Websafe

= 11.6.1
📦
F5

Big Ip Websafe

= 12.0.0
📦
F5

Big Ip Websafe

= 12.1.0
📦
F5

Big Ip Websafe

= 12.1.1
📦
F5

Big Ip Websafe

= 12.1.2

References & Advisories

🔗 http://www.securityfocus.com/bid/101543
🔗 http://www.securitytracker.com/id/1039638
🔗 https://support.f5.com/csp/article/K74759095
🔗 http://www.securityfocus.com/bid/101543
🔗 http://www.securitytracker.com/id/1039638
🔗 https://support.f5.com/csp/article/K74759095

相关漏洞威胁

CVE-2019-66659.4

On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and...

CVE-2015-80227.5

The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x ...

CVE-2019-65956.1

Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI.

CVE-2016-14974.9

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5....