K000132800 : F5OS QKView utility vulnerability CVE-2024-23607

Security Advisory Description

A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. (CVE-2024-23607)

Impact

An authenticated attacker may exploit this vulnerability by executing a crafted QKView utility command. If the exploit is successful, an attacker can read arbitrary files in the F5OS container.