Patch now! BIG-IP Configuration utility is vulnerable for an authentication bypass

🗓️ 31 Oct 2023 13:00:04Reported by Malwarebytes blogType

malwarebytes🔗 www.malwarebytes.com👁 51 Views

Patch now! BIG-IP Configuration utility has a critical authentication bypass vulnerability allowing unauthenticated remote code execution. F5 warns about the issue in versions 13.1.0 to 17.1.0, impacting over 6,000 instances

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager	2 Nov 202316:03	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	23 Jan 202417:07	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	23 Jan 202417:07	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager	30 Oct 202315:50	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager	1 Nov 202309:31	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager	3 Nov 202313:31	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center	5 Nov 202306:45	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager	3 Dec 202506:39	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager	4 Jul 202504:20	–	githubexploit
GithubExploit	Exploit for Injection in Atlassian Confluence_Data_Center	27 Jul 202307:14	–	githubexploit

31 Oct 2023 13:00Current

9.3High risk

Vulners AI Score9.3

EPSS0.96515