CVE-2016-3686

The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain…

published April 13, 2016

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by leveraging access to the Location HTTP header in a redirect.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01526 · 74.3th percentile
Published
2016-04-13T16:00Z
EPSS history
Timeline
  • 13 APR 16:00Z
    The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain…
    cvelistv5