CVE-2024-23976

When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-23976

CVE-2024-23976 concerns F5 BIG-IP Appliance mode where an authenticated administrator can bypass Appliance mode restrictions via iAppsLX templates. The security advisory K91054692 states that affected products are BIG-IP (all modules) on the 17.x line with vulnerability on 17.1.0 and a fixed rele...

K91054692: BIG-IP Appliance mode iAppsLX vulnerability CVE-2024-23976

Security Advisory Description When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. CVE-2024-23976 Impact An authenticated attacker with local system access and th...