An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
References
Link | Resource |
---|---|
https://support.f5.com/csp/article/K44942017 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/95841 | Third Party Advisory VDB Entry |
https://support.f5.com/csp/article/K44942017?utm_source=f5support&utm_medium=RSS | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2020-01-07 17:15
Updated : 2020-01-24 11:19
NVD link : CVE-2014-5209
Mitre link : CVE-2014-5209
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
f5
- big-ip_edge_gateway
- big-ip_webaccelerator
- big-iq_cloud_and_orchestration
- big-ip_application_security_manager
- big-ip_wan_optimization_manager
- big-ip_global_traffic_manager
- big-ip_link_controller
- big-ip_protocol_security_module
- big-iq_cloud
- big-iq_security
- enterprise_manager
- big-ip_domain_name_system
- big-iq_adc
- big-ip_advanced_firewall_manager
- big-iq_device
- big-ip_access_policy_manager
- big-iq_centralized_management
- websafe
- mobilesafe
- big-ip_local_traffic_manager
- big-ip_application_acceleration_manager
- big-ip_analytics
- iworkflow
- big-ip_policy_enforcement_manager
ntp
- ntp