CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-6249

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.2%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 2.1

References

Products affected by CVE-2016-6249

F5 » Big-Ip Access Policy Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0
F5 » Big-Ip Access Policy Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1
F5 » Big-Ip Access Policy Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2
F5 » Big-Ip Access Policy Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3
F5 » Big-Ip Access Policy Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4
F5 » Big-Ip Access Policy Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0
F5 » Big-Ip Access Policy Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1
F5 » Big-Ip Access Policy Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1
F5 » Big-Ip Advanced Firewall Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0
F5 » Big-Ip Analytics » Version: 11.5.0

cpe:2.3:a:f5:big-ip_analytics:11.5.0
F5 » Big-Ip Analytics » Version: 11.5.1

cpe:2.3:a:f5:big-ip_analytics:11.5.1
F5 » Big-Ip Analytics » Version: 11.5.2

cpe:2.3:a:f5:big-ip_analytics:11.5.2
F5 » Big-Ip Analytics » Version: 11.5.3

cpe:2.3:a:f5:big-ip_analytics:11.5.3
F5 » Big-Ip Analytics » Version: 11.5.4

cpe:2.3:a:f5:big-ip_analytics:11.5.4
F5 » Big-Ip Analytics » Version: 11.6.0

cpe:2.3:a:f5:big-ip_analytics:11.6.0
F5 » Big-Ip Analytics » Version: 11.6.1

cpe:2.3:a:f5:big-ip_analytics:11.6.1
F5 » Big-Ip Analytics » Version: 12.0.0

cpe:2.3:a:f5:big-ip_analytics:12.0.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3
F5 » Big-Ip Application Acceleration Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4
F5 » Big-Ip Application Acceleration Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0
F5 » Big-Ip Application Acceleration Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1
F5 » Big-Ip Application Acceleration Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0
F5 » Big-Ip Application Security Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0
F5 » Big-Ip Application Security Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1
F5 » Big-Ip Application Security Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2
F5 » Big-Ip Application Security Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3
F5 » Big-Ip Application Security Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4
F5 » Big-Ip Application Security Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0
F5 » Big-Ip Application Security Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1
F5 » Big-Ip Application Security Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0
F5 » Big-Ip Domain Name System » Version: 12.0.0

cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0
F5 » Big-Ip Global Traffic Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0
F5 » Big-Ip Global Traffic Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1
F5 » Big-Ip Global Traffic Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2
F5 » Big-Ip Global Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3
F5 » Big-Ip Global Traffic Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4
F5 » Big-Ip Global Traffic Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0
F5 » Big-Ip Global Traffic Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1
F5 » Big-Ip Link Controller » Version: 11.5.0

cpe:2.3:a:f5:big-ip_link_controller:11.5.0
F5 » Big-Ip Link Controller » Version: 11.5.1

cpe:2.3:a:f5:big-ip_link_controller:11.5.1
F5 » Big-Ip Link Controller » Version: 11.5.2

cpe:2.3:a:f5:big-ip_link_controller:11.5.2
F5 » Big-Ip Link Controller » Version: 11.5.3

cpe:2.3:a:f5:big-ip_link_controller:11.5.3
F5 » Big-Ip Link Controller » Version: 11.5.4

cpe:2.3:a:f5:big-ip_link_controller:11.5.4
F5 » Big-Ip Link Controller » Version: 11.6.0

cpe:2.3:a:f5:big-ip_link_controller:11.6.0
F5 » Big-Ip Link Controller » Version: 11.6.1

cpe:2.3:a:f5:big-ip_link_controller:11.6.1
F5 » Big-Ip Link Controller » Version: 12.0.0

cpe:2.3:a:f5:big-ip_link_controller:12.0.0
F5 » Big-Ip Local Traffic Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0
F5 » Big-Ip Local Traffic Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1
F5 » Big-Ip Local Traffic Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2
F5 » Big-Ip Local Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3
F5 » Big-Ip Local Traffic Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4
F5 » Big-Ip Local Traffic Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0
F5 » Big-Ip Local Traffic Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1
F5 » Big-Ip Local Traffic Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4
F5 » Big-Ip Policy Enforcement Manager » Version: 11.6.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1
F5 » Big-Ip Policy Enforcement Manager » Version: 12.0.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0
F5 » Big-Ip Websafe » Version: 11.5.0

cpe:2.3:a:f5:big-ip_websafe:11.5.0
F5 » Big-Ip Websafe » Version: 11.5.1

cpe:2.3:a:f5:big-ip_websafe:11.5.1
F5 » Big-Ip Websafe » Version: 11.5.2

cpe:2.3:a:f5:big-ip_websafe:11.5.2
F5 » Big-Ip Websafe » Version: 11.5.3

cpe:2.3:a:f5:big-ip_websafe:11.5.3
F5 » Big-Ip Websafe » Version: 11.5.4

cpe:2.3:a:f5:big-ip_websafe:11.5.4
F5 » Big-Ip Websafe » Version: 11.6.0

cpe:2.3:a:f5:big-ip_websafe:11.6.0
F5 » Big-Ip Websafe » Version: 11.6.1

cpe:2.3:a:f5:big-ip_websafe:11.6.1
F5 » Big-Ip Websafe » Version: 12.0.0

cpe:2.3:a:f5:big-ip_websafe:12.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-6249

Products

Pricing

Contact Us