← volver
CVE-2023-43485

BIGIP and BIG-IQ TACACS+ audit log Vulnerability

CVSS 5.5 MEDIUMEPSS 0.2%CWE-532
When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
F5 · BIG-IPF5 · BIG-IQ

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://my.f5.com/manage/s/article/K06110200