Skip to main content

F5Os A CVE-2023-36494

MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2023-08-02 f5sirt@f5.com
Information Disclosure F5Os A
4.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.4 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 02, 2023 - 16:15 nvd
MEDIUM 4.4

DescriptionNVD

Audit logs on F5OS-A may contain undisclosed sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

AnalysisAI

Audit logs on F5OS-A may contain undisclosed sensitive information. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-532. Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Affected products include: F5 F5Os-A.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in F5Os A

View all
CVE-2025-36546 CRITICAL
9.2 May 07

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication
CVE-2022-41835 HIGH
8.8 Oct 19

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an aut
CVE-2025-46265 HIGH
8.7 May 07

On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may b
CVE-2025-43878 HIGH
8.3 May 07

When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may

CVE-2023-22657 HIGH
7.8 Feb 01

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F
CVE-2024-24966 MEDIUM
5.5 Feb 14

When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly author
CVE-2024-23607 MEDIUM
5.5 Feb 14

A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read file
CVE-2022-41780 MEDIUM
5.5 Oct 19

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an
CVE-2022-25990 MEDIUM
5.3 May 05

On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Rated me

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all
CVE-2023-43261 HIGH POC
7.5
CVE-2025-24984 MEDIUM
4.6
CVE-2017-8075 CRITICAL POC
9.8
CVE-2017-8074 CRITICAL POC
9.8
CVE-2026-22778 CRITICAL POC
9.8
CVE-2019-17395 CRITICAL POC
9.8
CVE-2019-17398 CRITICAL POC
9.8
CVE-2019-17394 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-36494 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy