CVE-2021-23005

The CVE-2021-23005 issue affects BIG-IQ high-availability (HA) when using a Quorum device for automatic failover; TLS is not used with the Corosync protocol, exposing in-transit data to potential eavesdropping/modification. Affected BIG-IQ HA versions are 7.x and 6.x; this is fixed in BIG-IQ 8.0....

CVE-2021-22995

On all 7.x and 6.x versions fixed in 8.0.0, BIG-IQ high availability HA when using a Quorum device for automatic failover does not implement any form of authentication with the Corosync daemon. Note: Software versions which have reached End of Software Development EoSD are not evaluated...