| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | ≥ 11.6.1, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.5≥ 13.0.0, ≤ 13.1.3≥ 14.0.0, ≤ 14.1.2≥ 15.0.0, ≤ 15.1.0 | |
| big-ip access policy manager client | ≥ 7.1.5, ≤ 7.1.8 | |
| big-ip edge gateway | ≥ 11.6.1, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.5≥ 13.0.0, ≤ 13.1.3≥ 14.0.0, ≤ 14.1.2≥ 15.0.0, ≤ 15.1.0 |
In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free