CVE-2021-23005

The CVE-2021-23005 issue affects BIG-IQ high-availability (HA) when using a Quorum device for automatic failover; TLS is not used with the Corosync protocol, exposing in-transit data to potential eavesdropping/modification. Affected BIG-IQ HA versions are 7.x and 6.x; this is fixed in BIG-IQ 8.0....

CVE-2021-22995

On all 7.x and 6.x versions fixed in 8.0.0, BIG-IQ high availability HA when using a Quorum device for automatic failover does not implement any form of authentication with the Corosync daemon. Note: Software versions which have reached End of Software Development EoSD are not evaluated...

PT-2021-15332

Name of the Vulnerable Software and Affected Versions F5 BIG-IQ versions 6.x through 7.x Description The issue arises when using a Quorum device for BIG-IQ high availability HA with automatic failover, where BIG-IQ fails to utilize Transport Layer Security TLS with the Corosync protocol...

CVE-2021-22995: Missing Authentication for Critical Function

On all 7.x and 6.x versions fixed in 8.0.0, BIG-IQ high availability HA when using a Quorum device for automatic failover does not implement any form of authentication with the Corosync daemon. Note: Software versions which have reached End of Software Development EoSD are not evaluated...