| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip advanced firewall manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip advanced web application firewall | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip analytics | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip application acceleration manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip application security manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip application visibility and reporting | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip automation toolchain | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip carrier-grade nat | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip container ingress services | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip ddos hybrid defender | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip domain name system | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip edge gateway | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip fraud protection service | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip global traffic manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip link controller | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip local traffic manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip policy enforcement manager | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip ssl orchestrator | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip webaccelerator | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-ip websafe | = 21.0.0≥ 16.1.0, ≤ 16.1.6≥ 17.1.0, ≤ 17.1.3≥ 17.5.0, ≤ 17.5.1 | |
| big-iq centralized management | = 8.4.0 |
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free