For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pramod_Gopala_1's avatar
Pramod_Gopala_1
Icon for Nimbostratus rankNimbostratus
Dec 01, 2015

phpinfo Information Disclosure Vulnerability

During a PCI scan test the report has phpinfo Information Disclosure Vulnerability. This was reported on the Public IP of F5's Virtual server.   Can anyone suggest me how to get rid of this vulner...
application delivery
BIG-IP
LTM
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Dec 01, 2015

If it is on the public IP (presumably the self-IP) then you need to set your self-IP Port Lockdown to None so that externals can't get access to the management GUI.