An improper sanitization vulnerability in the BIG-IP QKView utility allows a low-privileged attacker to access sensitive information contained within QKView files. The vulnerability affects specific versions of F5 BIG-IP (16.1.0, 17.1.0, and 17.5.0). The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity and no user interaction required. The impact is limited to confidentiality, with no effect on integrity or availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability allows unauthorized disclosure of sensitive information from QKView files by low-privileged attackers, potentially exposing confidential data. There is no impact on system integrity or availability. The medium severity rating reflects the confidentiality impact and ease of exploitation over the network without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to QKView files and limit permissions to trusted users only. Monitor for updates from F5 regarding patches or mitigations.