Session Information Exposure Vulnerability in F5 BIG-IP APM

CVE-2022-27636

What is CVE-2022-27636?

An issue in F5 BIG-IP APM allows for the logging of sensitive session-related information when the VPN is initiated on a Windows system. This vulnerability affects various versions of the BIG-IP APM, where exposed logs could potentially be accessed by unauthorized individuals, leading to possible exploitation of internal user data. It is crucial for organizations using these affected versions to evaluate their systems and take necessary precautions to mitigate this risk.

References