Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP All
Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6
Opened: Oct 31, 2015 Severity: 2-Critical
Introduction of mgmt module to allow access to REST framework resources opened up two ways to do the same thing by exposing public modules registered by iControl REST.
Having two ways to do the same thing is confusing. iControl REST modules should not be exposed by mgmt module (As it already exposed in tmsh directly - ltm, gtm, apm, sys, cm, etc)
This was introduced on version 12.0
None
None