CVE-2016-6249
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-6249
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款F5 BIG-IP产品安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
F5 BIG-IP LTM等都是美国F5公司的产品。LTM是一款本地流量管理器；APM是一套提供安全统一访问关键业务应用和网络的解决方案。REST Framework Logging是其中的一个登录框架组件。 多款F5 BIG-IP产品中的REST Framework Logging存在安全漏洞，该漏洞源于程序将敏感属性（包括密码）以明文的方式储存在/var/log/restjavad.0.log文件。本地攻击者可通过读取文件利用该漏洞获取敏感信息。以下产品和版本受到影响：F5 BIG-IP LTM 12
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| F5 Networks | F5 BIG-IP, REST Framework Logging | BIG-IP 12.0.0, BIG-IP 11.5.0 - 11.6.1 | - |
II. Public POCs for CVE-2016-6249
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-6249
Please Login to view more intelligence information
- https://support.f5.com/csp/article/K12685114x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2016-6249
IV. Related Vulnerabilities
V. Comments for CVE-2016-6249
No comments yet