CVE-2013-6024

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.

CVSS v2.0 4.4 MEDIUM

4.4^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:S/C:C/I:N/A:N

Exploitability : 2.7 / Impact : 6.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html	Vendor Advisory
http://www.kb.cert.org/vuls/id/146430	US Government Resource
http://www.securityfocus.com/bid/65422
https://support.f5.com/csp/article/K14969
http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html	Vendor Advisory
http://www.kb.cert.org/vuls/id/146430	US Government Resource
http://www.securityfocus.com/bid/65422
https://support.f5.com/csp/article/K14969

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:f5:big-ip_access_policy_manager:10.1.0:::::::*
	cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.4:::::::*
	cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:::::::*
	cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:::::::*
	cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:::::::*
	cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:::::::*
	cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:::::::*
	cpe:2.3:a:f5:big-ip_edge_gateway:10.1.0:::::::*
	cpe:2.3:a:f5:big-ip_edge_gateway:10.2.4:::::::*
	cpe:2.3:a:f5:big-ip_edge_gateway:11.0.0:::::::*
	cpe:2.3:a:f5:big-ip_edge_gateway:11.5.0:::::::*
	cpe:2.3:a:f5:firepass:6.0.0:::::::*
	cpe:2.3:a:f5:firepass:6.1.0:::::::*
	cpe:2.3:a:f5:firepass:7.0.0:::::::*
	cpe:2.3:h:f5:big-ip_access_policy_manager:10.1.0:::::::standalone
	cpe:2.3:h:f5:big-ip_access_policy_manager:10.2.4:::::::standalone
	cpe:2.3:h:f5:big-ip_access_policy_manager:11.0.0:::::::standalone
	cpe:2.3:h:f5:big-ip_access_policy_manager:11.1.0:::::::standalone
	cpe:2.3:h:f5:big-ip_access_policy_manager:11.2.0:::::::standalone
	cpe:2.3:h:f5:big-ip_access_policy_manager:11.2.1:::::::standalone
	cpe:2.3:h:f5:big-ip_access_policy_manager:11.3.0:::::::standalone

History

21 Nov 2024, 01:58

Type	Values Removed	Values Added
References	~~() http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html - Vendor Advisory~~	() http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html - Vendor Advisory
References	~~() http://www.kb.cert.org/vuls/id/146430 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/146430 - US Government Resource
References	~~() http://www.securityfocus.com/bid/65422 -~~	() http://www.securityfocus.com/bid/65422 -
References	~~() https://support.f5.com/csp/article/K14969 -~~	() https://support.f5.com/csp/article/K14969 -

Information

Published : 2014-02-10 18:15

Updated : 2024-11-21 01:58

NVD link : CVE-2013-6024

Mitre link : CVE-2013-6024

CVE.ORG link : CVE-2013-6024

JSON object : View

Products Affected

firepass
big-ip_access_policy_manager
big-ip_edge_gateway

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2013-6024", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.4, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:S/C:C/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 2.7, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-02-10T18:15:10.683", "references": [{"url": "http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/146430", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/65422", "source": "cret@cert.org"}, {"url": "https://support.f5.com/csp/article/K14969", "source": "cret@cert.org"}, {"url": "http://support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/146430", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/65422", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.f5.com/csp/article/K14969", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors."}, {"lang": "es", "value": "Los componentes Edge Client en F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, y 14.x, BIG-IP Edge Gateway 10.x y 11.x y FirePass 7.0.0 permiten a atacantes obtener informaci\u00f3n sensible de la memoria de procesos a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T01:58:38.553", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:10.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5BE38A0-CD2F-4C18-9EE3-D56A23BDB73A"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1FB07A3-8D07-44F6-B827-B22D3799A707"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD575B3E-FBA9-443A-9B52-49766DBE40C4"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8F3BF3A-DC42-45F4-99C0-DF71DB1A9E44"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "002333F5-2864-434F-AC94-9C644098F95C"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB630A86-FB84-4199-9E4D-38EB620806CB"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABF47456-CCA0-4817-9AEF-631DC152174E"}, {"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:10.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D982EE29-D298-4D39-897A-580D867CDE50"}, {"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:10.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE109CFC-59FD-4859-87EF-5FDD1BD94260"}, {"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53531CA7-5E47-4C46-BDA5-3B4710085078"}, {"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:11.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "917BA1D9-2C47-41BE-80AF-05F5AC855945"}, {"criteria": "cpe:2.3:a:f5:firepass:6.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01DDFFC4-688B-45FB-B548-A9654BACFA05"}, {"criteria": "cpe:2.3:a:f5:firepass:6.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47741322-99CD-4B9E-BD6E-A2934572E60B"}, {"criteria": "cpe:2.3:a:f5:firepass:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "442D343A-973B-4C33-B99B-1EA2B7670DE5"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:10.1.0:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "7B2F4D17-8167-4726-B294-1C66120B6278"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:10.2.4:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "16686F6B-E833-4056-B3DA-C29BDE5B987E"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "B724E2E6-D28A-4F6F-BF9D-D40AE970C43F"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "CCDCC772-50EC-4709-A042-AED38B17A0CF"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "52B45A67-64B1-44DE-AF6A-AE8448A99BC5"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "2EED459F-7CF2-49FF-9D67-AB9DDD7ACE9A"}, {"criteria": "cpe:2.3:h:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:standalone", "vulnerable": true, "matchCriteriaId": "D85B89C8-5C81-40B3-BDE8-54E06C9CF116"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}

4.4 /10