CVE-2014-5209 — Sensitive Information Exposure in F5 Big-ip Access Policy Manager

CWE-200 — Sensitive Information Exposure7 documents7 sources
Severity
5.3MEDIUMNVD
EPSS
0.7%
top 27.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
25
NTPF5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall Manager+22 more
Timeline
PublishedJan 8
Latest updateMay 17

Description

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages27 packages

▶NVDf5/big-ip_link_controller10.2.1 — 10.2.4+6
▶Debianntp/ntp< 1:4.2.8p3+dfsg-1
▶NVDf5/iworkflow2.0.0 — 2.3.0
▶NVDf5/big-iq_cloud4.0.0 — 4.5.0
▶NVDf5/big-iq_device4.2.0 — 4.5.0

🔴Vulnerability Details

3
GHSA
GHSA-m44h-f944-f3x3: An Information Disclosure vulnerability exists in NTP 4↗2022-05-17
▶
OSV
CVE-2014-5209: An Information Disclosure vulnerability exists in NTP 4↗2020-01-08
▶
CVEList
CVE-2014-5209: An Information Disclosure vulnerability exists in NTP 4↗2020-01-08
▶

📋Vendor Advisories

2
Red Hat
ntp: Information Disclosure vulnerability via GET_RESTRICT control message↗2014-08-25
▶
Debian
CVE-2014-5209: ntp - An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7...↗2014
▶

💬Community

1
Bugzilla
CVE-2014-5209 ntp: Information Disclosure vulnerability via GET_RESTRICT control message↗2020-02-20
▶