CVE-2012-1493

Currently unrated

Key Information:

Vendor
F5
Status
Big-ip Application Security Manager
Big-ip Global Traffic Manager
Big-ip Local Traffic Manager
Tmos
Vendor
CVE Published:
9 July 2012

Summary

F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.

References

http://support.f5.com/kb/en-us/solutions/public/13000/600...
x_refsource_CONFIRM
https://github.com/rapid7/metasploit-framework/blob/maste...
x_refsource_MISC
https://www.trustmatta.com/advisories/MATTA-2012-002.txt
x_refsource_MISC

EPSS Score

41% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.