K000135449: BIG-IP FIPS HSM password vulnerability CVE-2023-3470

Security Advisory Description Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature of the password allows an authenticated attacker with TMOS Shell tmsh access to the BIG-IP system, or anyone with...

K000134535: BIG-IP Configuration utility vulnerability CVE-2023-38423

Security Advisory Description A cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. CVE-2023-38423 Impact An authenticated attacker may exploit this...

K000133472: BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2023-38419

Security Advisory Description An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. CVE-2023-38419 Impact The iControl SOAP daemon becomes unresponsive. This vulnerability allows an authenticated attacker with a...

K000134746: BIG-IP Edge Client for macOS vulnerability CVE-2023-38418

Security Advisory Description The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. CVE-2023-38418 Impact An attacker with an ability to run unprivileged arbitrary code on the target macOS client may be able to abuse an...

K000132563: BIG-IP Edge Client for Windows and macOS vulnerability CVE-2023-36858

Security Advisory Description An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list. CVE-2023-36858 Impact An authenticated attacker with local access to the BIG-IP Edge Client on a...

K000133474: BIG-IP Configuration utility vulnerability CVE-2023-38138

Security Advisory Description A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. CVE-2023-38138 Impact An attacker may exploit this...

F5 BIG-IP Configuration utility Cross-site Scripting Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A cross-site scripting vulnerability exists in the F5 BIG-IP Configuration utility. An attacker could exploit this vulnerabili...

F5 BIG-IP Configuration utility 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to steal a victim's cookie-bas...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000133474)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.5 / 15.1.9.1 / 16.1.3.5 / 17.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000133474 advisory. - A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the...

The vulnerability in the kernel of operating systems such as macOS Big Sur, macOS Monterey, iOS, iPadOS, tvOS, macOS Ventura, and watchOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the kernel of operating systems such as macOS Big Sur, macOS Monterey, iOS, iPadOS, tvOS, macOS Ventura, and watchOS relates to operations that occur outside of the buffers in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows and macOS vulnerability (K000132563)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.6 / 15.1.10.2 / 16.1.4 / 17.1.0.3 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000132563 advisory. - An insufficient verification of data vulnerability exists in BIG-IP Edge Client f...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000134535)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.5 / 15.1.9.1 / 16.1.3.5 / 17.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000134535 advisory. - A cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP...

PT-2023-24981 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions affected versions not specified Description: The issue concerns F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards, which generate a deterministic password for the Crypto User account. This predictable password allows an...

F5 Networks BIG-IP : BIG-IP FIPS HSM password vulnerability (K000135449)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4 / 14.1.4 / 15.1.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K000135449 advisory. - Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password...

F5 BIG-IP iControl SOAP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IQ Centralized Management is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery...

PT-2023-26413 · F5 · Big-Ip Edge Client Installer

Name of the Vulnerable Software and Affected Versions: BIG-IP Edge Client Installer affected versions not specified Description: The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Recommendations: At the moment, there...

F5 Networks BIG-IP : BIG-IP Edge Client for macOS vulnerability (K000134746)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K000134746 advisory. - The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the...

F5 BIG-IP Edge Client Installer 数据伪造问题漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP APM elevation of privilege vulnerability, which is caused by incorrect verification of cryptographic signatures duri...

PT-2023-26319 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: A reflected cross-site scripting XSS issue exists in an undisclosed page of the BIG-IP Configuration utility. This allows an attacker to run JavaScript in the context of the currently...

F5 Networks BIG-IP : BIG-IP and BIG-IQ iControl SOAP vulnerability (K000133472)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.5 / 15.1.9.1 / 16.1.3.5 / 17.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000133472 advisory. - An authenticated attacker with guest privileges or higher can cause the iControl SOAP...