An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 02:11
Type | Values Removed | Values Added |
---|---|---|
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/95841 - Third Party Advisory, VDB Entry | |
References | () https://support.f5.com/csp/article/K44942017 - | |
References | () https://support.f5.com/csp/article/K44942017?utm_source=f5support&%3Butm_medium=RSS - |
Information
Published : 2020-01-08 01:15
Updated : 2024-11-21 02:11
NVD link : CVE-2014-5209
Mitre link : CVE-2014-5209
CVE.ORG link : CVE-2014-5209
JSON object : View
Products Affected
ntp
- ntp
f5
- big-ip_application_security_manager
- big-iq_security
- big-ip_global_traffic_manager
- big-ip_domain_name_system
- big-ip_link_controller
- big-iq_centralized_management
- iworkflow
- big-ip_edge_gateway
- big-ip_wan_optimization_manager
- big-ip_protocol_security_module
- enterprise_manager
- big-ip_policy_enforcement_manager
- big-iq_cloud
- big-ip_analytics
- big-ip_application_acceleration_manager
- big-ip_webaccelerator
- mobilesafe
- websafe
- big-iq_device
- big-iq_cloud_and_orchestration
- big-ip_local_traffic_manager
- big-iq_adc
- big-ip_advanced_firewall_manager
- big-ip_access_policy_manager
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor