CVE-2017-0301

HighCVSS 7.6/10Last modified Jun 17, 2026

Description

In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application resources and backend servers are unaffected.

Metrics

CVSS 3.0 7.6/10CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
F5 Networks, Inc.	BIG-IP APM	11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4; 11.6.0, 11.6.1; 12.0.0, 12.1.0, 12.1.1, 12.1.2

References

http://www.securitytracker.com/id/1040040Third Party Advisory, VDB Entry
https://support.f5.com/csp/article/K54358225Issue Tracking, Vendor Advisory
http://www.securitytracker.com/id/1040040Third Party Advisory, VDB Entry
https://support.f5.com/csp/article/K54358225Issue Tracking, Vendor Advisory

Timeline

Published: Dec 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-03025.3In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be CVE-2017-03037.5In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11 CVE-2017-03045.4A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a CVE-2017-03059.8F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP sys CVE-2017-03067.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within CVE-2017-03077.8An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within CVE-2017-03088.8All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape CVE-2017-03098.8All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where multiple integer overflows may caus CVE-2017-03106.5All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where improper access controls allowing u CVE-2017-03118.8NVIDIA GPU Display Driver R378 contains a vulnerability in the kernel mode layer handler where improper access control may lead to denial of CVE-2017-03127.8All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscapeI CVE-2017-03137.8All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) implementation of the Subm