K000132539 : BIG-IP Edge Client for Windows and macOS vulnerability CVE-2023-24461

Security Advisory Description

An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. (CVE-2023-24461)

Impact

An unauthenticated attacker with a man-in-the-middle (MITM) position may exploit this vulnerability and trick BIG-IP Edge Client to establish connections with an illegitimate BIG-IP APM system.