Skip to content
OpenAdvisories
Unscored CVE-2015-8611 EUVD-2015-8488GHSA-h9jc-3x38-h2v6

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platfor…

Published Jan 12, 2016 · Updated Aug 6, 2024 · Assigned by mitre

Description

BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote attackers to obtain login access to AOM via an (1) expired or (2) default password.

References