CVE-2023-36494
published 2023-08-02CVE-2023-36494: Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not…
PriorityP415medium4.4CVSS 3.1
AVLACLPRHUINSUCHINAN
EPSS
0.18%
7.2th percentile
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | f5os-a | — | — |
| f5 | f5os-a | — | — |
| f5 | f5os_appliance | >= 1.4.0 < 1.5.0 | 1.5.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2023-36494: Audit logs on F5OS-A may contain undisclosed sensitive information
vendor_f5·2023-08-02·CVSS 4.4
CVE-2023-36494 [MEDIUM] CWE-532 CVE-2023-36494: Audit logs on F5OS-A may contain undisclosed sensitive information
CVE-2023-36494: Audit logs on F5OS-A may contain undisclosed sensitive information
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Products: F5OS-A
Affected Versions: 1.4.0
F5 Advisory Articles: K000134922
F5 References: https://my.f5.com/manage/s/article/K000134922
GHSA
GHSA-wj75-7j4g-j268: Audit logs on F5OS-A may contain undisclosed sensitive information
ghsa_unreviewed·2023-08-02
CVE-2023-36494 [MEDIUM] CWE-532 GHSA-wj75-7j4g-j268: Audit logs on F5OS-A may contain undisclosed sensitive information
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-08-02
Published