K3015 : FIPS hardware vulnerability - nCipher Advisory #9 - CAN-2004-0320

2013-03-2800:00:00

my.f5.com

AI Score

5.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Security Advisory Description

Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F5 security vulnerability response policy. F5 products and versions that have been evaluated for this Security Advisory

Product	Affected	Not Affected
BIG-IP LTM	None	9.x
10.x
11.x
BIG-IP GTM	None	9.x
10.x
11.x
BIG-IP ASM	None	9.x
10.x
11.x
BIG-IP Link Controller	None	9.x
10.x
11.x
BIG-IP WebAccelerator	None	9.x
10.x
11.x
BIG-IP PSM	None	9.x
10.x
11.x
BIG-IP WAN Optimization	None	10.x
11.x
BIG-IP APM	None	10.x
11.x
BIG-IP Edge Gateway	None	10.x
11.x
BIG-IP Analytics	None	11.x
BIG-IP AFM	None	11.x
BIG-IP PEM	None	11.x
FirePass	None	5.x
6.x
7.x
Enterprise Manager	None	1.x
2.x
3.x
ARX	None	2.x
3.x
4.x
5.x
6.x
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module’s run-time memory via certain sequences of commands.
Information about this advisory is available at the following location:
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0320>