CVE-2016-3686 | BDVDB-2026-75232 Detail

Description#

The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by leveraging access to the Location HTTP header in a redirect.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1035519
https://support.f5.com/kb/en-us/solutions/public/k/82/sol82679059.html

Exploit#

No public exploit known

History#

Version 12016-04-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.