Skip to content
OpenAdvisories
Unscored CVE-2018-15328 EUVD-2018-7206GHSA-fggc-gj4v-g5xq

On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 u…

Published Dec 12, 2018 · Updated Aug 5, 2024 · Assigned by f5

Description

On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used for authentication and privacy are not handled by the BIG-IP system Secure Vault feature; they are written in the clear to the various configuration files.

Affected products

VendorProductAffectedFixed
F5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator), Enterprise Manager, BIG-IQ Centralized Management, F5 iWorkflow BIG-IP 14.0.x, 13.x, 12.x, 11.x, EM 3.1.1, BIG-IQ 6.x, 5.x, 4.x, iWorkflow 2.x —

References