CVE-2013-6024

MEDIUM 4.4CVE-2013-6024 · Published 10/02/2014 · updated 16/06/2026

In short

CVE-2013-6024 is a MEDIUM (CVSS 4.4) vulnerability affecting big-ip access policy manager (f5), big-ip edge gateway (f5), firepass (f5).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
big-ip access policy manager f5	`= 10.1.0= 10.2.4= 11.0.0= 11.1.0= 11.2.0= 11.2.1= 11.3.0`	No fix yet
big-ip edge gateway f5	`= 10.1.0= 10.2.4= 11.0.0= 11.5.0`	No fix yet
firepass f5	`= 6.0.0= 6.1.0= 7.0.0`	No fix yet

Description

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.

References

support.f5.com/kb/en-us/solutions/public/14000/900/sol14969.html · Vendor Advisory
kb.cert.org/vuls/id/146430 · US Government Resource
securityfocus.com/bid/65422
support.f5.com/csp/article/K14969

More vulnerabilities in big-ip access policy manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2013-6024 is a MEDIUM (CVSS 4.4) vulnerability affecting big-ip access policy manager (f5), big-ip edge gateway (f5), firepass (f5).

Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.4% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

big-ip access policy manager

= 10.1.0= 10.2.4= 11.0.0= 11.1.0= 11.2.0= 11.2.1= 11.3.0

No fix yet

big-ip edge gateway

= 10.1.0= 10.2.4= 11.0.0= 11.5.0

No fix yet

firepass

= 6.0.0= 6.1.0= 7.0.0

No fix yet

More vulnerabilities in big-ip access policy manager

See all →