Vulnerability CVE-2021-23002

Vulnerability Name:

CVE-2021-23002 (CCN-199204)

Assigned:

2021-03-22

Published:

2021-03-22

Updated:

2021-04-05

Summary:

When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all 12.1.x and 11.6.x versions or Edge Client versions 7.2.1.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, or 7.1.8.x before 7.1.8.5, the session ID is visible in the arguments of the f5vpn.exe command when VPN is launched from the browser on a Windows system. Addressing this issue requires both the client and server fixes.
Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

CVSS v3 Severity:

4.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
3.9 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): None Availibility (A): None

6.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
5.3 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): None

CVSS v2 Severity:

2.7 Low (CVSS v2 Vector: AV:A/AC:L/Au:S/C:P/I:N/A:N)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): None Availibility (A): None

7.1 High (CCN CVSS v2 Vector: AV:A/AC:L/Au:S/C:C/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Adjacent_Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): None

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Obtain Information

References:

Source: MITRE
Type: CNA
CVE-2021-23002

Source: XF
Type: UNKNOWN
f5-cve202123002-info-disc(199204)

Source: CCN
Type: F5 Security Advisory K71891773
BIG-IP APM VPN vulnerability CVE-2021-23002

Source: MISC
Type: Vendor Advisory
https://support.f5.com/csp/article/K71891773

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:* (Version >= 7.1.5 and < 7.1.8.5)

OR cpe:/a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:* (Version >= 7.1.9 and < 7.1.9.8)

OR cpe:/a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:* (Version >= 7.2.1 and < 7.2.1.1)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 11.6.1 and <= 11.6.5)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0 and <= 12.1.5)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 13.1.0 and < 13.1.3.6)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 14.1.0 and < 14.1.4)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 15.1.0 and < 15.1.2.1)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 16.0.0 and < 16.0.1.1)

Configuration CCN 1:

cpe:/a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:14.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:13.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:12.1.5:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.6.5:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:13.1.3:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:15.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:16.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:15.1.2:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip_access_policy_manager:16.0.1:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK