Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2016-6249

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjava

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 Networks F5 BIG-IP, REST Framework Logging

  • BIG-IP 12.0.0, BIG-IP 11.5.0 - 11.6.1affected

References