imPC@ndo IT

Tracker / CVE-2018-5544

CVE-2018-5544

High 7.5

When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters.

Affected products and versions

f5 big-ip_access_policy_manager · 12.1.0 → 12.1.3
f5 big-ip_access_policy_manager · 13.0.0 → 13.1.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References