CVE-2017-6165: F5 BIG-IP Access Policy Manager

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.

Affected products

  • F5 BIG-IP Access Policy Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Advanced Firewall Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Analytics: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Application Acceleration Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Application Security Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Domain Name System: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Global Traffic Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Link Controller: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Local Traffic Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Policy Enforcement Manager: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …
  • F5 BIG-IP Websafe: version 11.5.1 only; version 11.5.2 only; version 11.5.3 only; version 11.5.4 only; version 11.6.0 only; version 11.6.1 only; …

Published 2017-10-20. Last modified 2026-06-17.