CVE-2016-2084: F5 BIG-IP Access Policy Manager

High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days.

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to obtain sensitive information or cause a denial of service (disruption) by leveraging a target instance configuration.

Affected products

F5 BIG-IP Access Policy Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Advanced Firewall Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Analytics: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Application Acceleration Manager: version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; …
F5 BIG-IP Application Security Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Domain Name System: version 12.0.0 only
F5 BIG-IP Edge Gateway: version 11.3.0 only
F5 BIG-IP Global Traffic Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Link Controller: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Local Traffic Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Policy Enforcement Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
F5 BIG-IP Protocol Security Module: version 11.3.0 only; version 11.4.0 only
F5 BIG-IP WAN Optimization Manager: version 11.3.0 only
F5 BIG-IP Webaccelerator: version 11.3.0 only
F5 BIG-IQ Application Delivery Controller: version 4.5.0 only
F5 BIG-IQ Cloud: version 4.2.0 only; version 4.3.0 only; version 4.4.0 only; version 4.5.0 only
F5 BIG-IQ Device: version 4.2.0 only; version 4.3.0 only; version 4.4.0 only; version 4.5.0 only
F5 BIG-IQ Security: version 4.2.0 only; version 4.3.0 only; version 4.4.0 only; version 4.5.0 only

Published 2016-04-13. Last modified 2026-06-17.