Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-75602
HistoryOct 11, 2023 - 12:00 a.m.

F5 Insufficient BIG-IP Session Expiration Vulnerability

2023-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
f5 big-ip
session expiration
vulnerability
configuration utility
authenticated users
management port
ip address
system commands
file manipulation
service disablement

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIG-IP suffers from an insufficient session expiration vulnerability, which can be exploited by an attacker to reuse session cookies generated by the Configuration utility for authenticated users for a limited period of time, and accessed through the management port and/or from an IP address to execute arbitrary system commands, create or delete files, or disable services.

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Related for CNVD-2023-75602