CVE-2016-6249 in BIG-IPinfo

Summary

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

07/19/2016

Disclosure

02/20/2017

CPE

ready

CVSS

4.3

EPSS

0.00063

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!