Vulnerability CVE-2017-6165 - CERT Civis.Net

Vulnerability Name:

CVE-2017-6165 (CCN-133874)

Assigned:

2017-10-20

Published:

2017-10-20

Updated:

2017-11-15

Summary:

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.

CVSS v3 Severity:

9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.8 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): None Availibility (A): None

Vulnerability Type:

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2017-6165

Source: BID
Type: Third Party Advisory, VDB Entry
101543

Source: CCN
Type: BID-101543
Multiple F5 BIG-IP Products CVE-2017-6165 Local Information Disclosure Vulnerability

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1039638

Source: XF
Type: UNKNOWN
f5-cve20176165-info-disc(133874)

Source: CCN
Type: F5 Security Advisory K74759095
SafeNet External Network HSM script vulnerability CVE-2017-6165

Source: CONFIRM
Type: Vendor Advisory
https://support.f5.com/csp/article/K74759095

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:12.2.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:11.5.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:11.5.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:11.5.4:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*

AND

cpe:/h:f5:viprion_application_delivery_controller:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_dns:12.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_dns:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_pem:12.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*

Denotes that component is vulnerable