CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...

CVE-2025-23415

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...

CVE-2025-23415

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610586218036 2025-02-05 18:16:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6krbz2b2b 2025-02-05 21:40:00+00:00| seen|...

CVE-2025-23415

CVE-2025-23415 affects BIG-IP APM, specifically the endpoint inspection in the APM access policy, where a missing integrity check could allow bypassing endpoint inspection checks for VPN connections initiated via the BIG-IP APM browser network access VPN client (Windows, macOS, Linux). The issue ...

CVE-2025-23415 BIG-IP APM Endpoint Inspection vulnerability

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux. Note:...