F5 BIG-IQ Centralized Management 8.3.0

CPE Details

F5 BIG-IQ Centralized Management 8.3.0
f5
big-iq_centralized_management
8.3.0
2023-05-09
15h57 +00:00
2023-08-07
16h14 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:f5:big-iq_centralized_management:8.3.0:*:*:*:*:*:*:*

Informations

Vendor

f5

Product

big-iq_centralized_management

Version

8.3.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-24775 2024-02-14 16h30 +00:00 When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
7.5
High
CVE-2024-23314 2024-02-14 16h30 +00:00 When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
7.5
High
CVE-2024-22093 2024-02-14 16h30 +00:00 When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
9.6
Critical
CVE-2024-23979 2024-02-14 16h30 +00:00 When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
7.5
High
CVE-2024-21782 2024-02-14 16h30 +00:00 BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
6.7
Medium
CVE-2024-23976 2024-02-14 16h30 +00:00 When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
6
Medium
CVE-2024-22389 2024-02-14 16h30 +00:00 When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
7.2
High
CVE-2023-43485 2023-10-10 12h34 +00:00 When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
5.5
Medium
CVE-2023-41964 2023-10-10 12h33 +00:00 The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
6.5
Medium
CVE-2023-38419 2023-08-02 15h55 +00:00 An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
4.3
Medium