CVE-2021-23002
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all 12.1.x and 11.6.x versions or Edge Client versions 7.2.1.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, or 7.1.8.x before 7.1.8.5, the session ID is visible in the arguments of the f5vpn.exe command when VPN is launched from the browser on a Windows system. Addressing this issue requires both the client and server fixes. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Cuando se usa BIG-IP APM versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, o todas las versiones 12.1.x y 11.6.x o Edge Client versiones 7.2.1.x anteriores a 7.2.1.1, versiones 7.1.9.x anteriores a 7.1.9.8 o versiones 7.1.8.x anteriores a 7.1.8.5, el ID de sesión es visible en los argumentos del comando f5vpn.exe cuando VPN está iniciado desde el navegador en un sistema Windows. Abordar este problema requiere correcciones tanto del cliente como del servidor. Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD).
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-01-06 CVE Reserved
- 2021-03-31 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://support.f5.com/csp/article/K71891773 | 2021-04-05 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
F5 Search vendor "F5" | Access Policy Manager Clients Search vendor "F5" for product "Access Policy Manager Clients" | >= 7.1.5 < 7.1.8.5 Search vendor "F5" for product "Access Policy Manager Clients" and version " >= 7.1.5 < 7.1.8.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Access Policy Manager Clients Search vendor "F5" for product "Access Policy Manager Clients" | >= 7.1.9 < 7.1.9.8 Search vendor "F5" for product "Access Policy Manager Clients" and version " >= 7.1.9 < 7.1.9.8" | - |
Affected
| ||||||
F5 Search vendor "F5" | Access Policy Manager Clients Search vendor "F5" for product "Access Policy Manager Clients" | >= 7.2.1 < 7.2.1.1 Search vendor "F5" for product "Access Policy Manager Clients" and version " >= 7.2.1 < 7.2.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 12.1.0 <= 12.1.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 12.1.0 <= 12.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 13.1.0 < 13.1.3.6 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 13.1.0 < 13.1.3.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 14.1.0 < 14.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 14.1.0 < 14.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 15.1.0 < 15.1.2.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 15.1.0 < 15.1.2.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 16.0.0 < 16.0.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 16.0.0 < 16.0.1.1" | - |
Affected
|