F5 BIG-IP DNS iControl REST Cleartext Password Exposure Vulnerability

A vulnerability exists in the BIG-IP DNS iControl REST commands 'gtm_add' and 'bigip_add', which return the 'ssh-password' parameter in cleartext. This information is also logged in the audit log. As a result, a highly privileged, authenticated attacker with access to the audit log could view sensitive information. This issue affects BIG-IP DNS versions 17.5.0 to 17.5.1 and 17.1.0 to 17.1.3, as well as all 16.x versions. Note that versions that have reached End of Technical Support are not evaluated.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cleartext SSH passwords, which could be used to gain further access or privileges on the affected system.

Remediation

Users can upgrade to BIG-IP DNS versions 17.5.1.4 or 17.1.3.1 to address this vulnerability. For more information about managing BIG-IP product hotfixes, refer to the F5 article K13123.