CVE Catalog
CVE-1999-1550
MediumExploitation Probability (EPSS)
Very high risk8.59%
94th percentile - higher than 94% of all known CVEs
Summary
The bigconf.conf file in F5 BIG/ip version 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the 'file' parameter.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to further attacks on the system or information leakage.
Recommendation
It is recommended to upgrade to a newer version of F5 BIG/ip to mitigate this vulnerability and restrict access to the bigconf.conf file.
Original NVD description (English source)
bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" parameter.

