CVE-2023-41253: BIG-IP DNS TSIG Key vulnerability
When a BIG-IP DNS or BIG-IP LTM system is enabled with the DNS Services license, and a TSIG key is created, the key is logged in plaintext in the audit log.
Other sources
When on BIG-IP DNS or BIG-IP LTM enabled with DNS Services License, and a TSIG key is created, it is logged in plaintext in the audit log. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-41253?
CVE-2023-41253 is a vulnerability that affects BIG-IP DNS or BIG-IP LTM with DNS Services License, where a TSIG key is created and logged in plaintext in the audit log.
How severe is CVE-2023-41253?
CVE-2023-41253 has a severity rating of 5.5 (Medium).
Which software versions are affected by CVE-2023-41253?
CVE-2023-41253 affects F5 Big-ip Domain Name System versions between 13.1.0 and 14.1.5, F5 Big-ip Local Traffic Manager versions between 13.1.0 and 14.1.5, F5 Big-ip Domain Name System versions between 15.1.0 and 15.1.9, and F5 Big-ip Local Traffic Manager versions between 15.1.0 and 15.1.9.
How can I fix CVE-2023-41253?
To fix CVE-2023-41253, upgrade to F5 Big-ip Domain Name System versions 16.1.4 or later, or F5 Big-ip Local Traffic Manager versions 16.1.4 or later.
Where can I find more information about CVE-2023-41253?
More information about CVE-2023-41253 can be found at the following link: [https://my.f5.com/manage/s/article/K98334513](https://my.f5.com/manage/s/article/K98334513)