This vulnerability in F5 BIG-IP DNS involves cleartext storage of sensitive information accessible via an undisclosed tmsh command. It requires a highly privileged authenticated user to exploit and allows unauthorized viewing of sensitive data. The affected versions are 17.5.0, 17.1.0, and 16.1.0. The CVSS 3.1 base score is 4.4, reflecting a medium severity with local attack vector, low attack complexity, and no user interaction required. The vulnerability does not affect system integrity or availability. No patch or official remediation level has been published by the vendor as of the current data. Software versions that have reached End of Technical Support are excluded from evaluation.

An attacker with high privileges on the affected BIG-IP DNS system can view sensitive information stored in cleartext, potentially leading to unauthorized disclosure of confidential data. There is no indication of impact on system integrity or availability. The vulnerability requires local privileged access, limiting the attack surface to trusted users or attackers who have already gained elevated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to highly privileged accounts and monitor for unauthorized access. No vendor advisory or patch links are currently available, so follow F5's updates for any forthcoming patches or mitigations.