Lucene search

F5CVE-2024-41719

HistoryAug 14, 2024 - 3:15 p.m.

CVE-2024-41719

2024-08-1415:15:27

CWE-532

web.nvd.nist.gov

cve-2024-41719

big-ip central manager

qkview

f5 ihealth

end of technical support (eots)

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS4

5.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

4.6

Confidence

High

EPSS

Percentile

9.5%

JSON

When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected configurations

Nvd

Node

f5big-ip_next_central_managerRange20.1.0–20.2.1

VendorProductVersionCPE
f5big-ip_next_central_manager*cpe:2.3:a:f5:big-ip_next_central_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
f5	big-ip_next_central_manager	*	cpe:2.3:a:f5:big-ip_next_central_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "BIG-IP Next Central Manager",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "20.2.1",
        "status": "affected",
        "version": "20.1.0",
        "versionType": "custom"
      }
    ]
  }
]

References

my.f5.com/manage/s/article/K000140006

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS4

5.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

4.6

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-41719