Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use an old password on F5 BIG-IP, in order to
access to the system.

Impacted products: BIG-IP Hardware, TMOS.

Severity: 1/4.

Creation date: 01/09/2016.

DESCRIPTION OF THE VULNERABILITY

The F5 BIG-IP product allows users to change their passwords.

However, if the configuration is not saved, new passwords are not
memorized.

An attacker can therefore use an old password on F5 BIG-IP, in
order to access to the system.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/F5-BIG-IP-password-changes-not-saved-20506