Lucene search
HistoryAug 14, 2024 - 3:15 p.m.
CVE-2024-39809
central manager
session refresh token
user logout
software versions
end of technical support
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.6%
The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected configurations
Node
f5big-ip_next_central_managerMatch20.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| f5 | big-ip_next_central_manager | 20.1.0 | cpe:2.3:a:f5:big-ip_next_central_manager:20.1.0:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2024-39809
2024-08-14 15:15:26
vulnrichment
vulnrichment
CVE-2024-39809 BIG-IP Next Central Manager vulnerability
2024-08-14 14:32:32
cvelist
cvelist
CVE-2024-39809 BIG-IP Next Central Manager vulnerability
2024-08-14 14:32:32
f5
f5
K000140111: BIG-IP Next Central Manager vulnerability CVE-2024-39809
2024-08-14 00:00:00
K000140552: Quarterly Security Notification (August 2024)
2024-08-14 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.6%
Related for NVD:CVE-2024-39809