133 matches found
CVE-2024-24966
CVE-2024-24966 affects F5OS (A and C branches) where LDAP remote authentication can authorize a remote user without an assigned role. Affected versions: F5OS-A 1.2.0 (vulnerable) with fix in 1.3.0; F5OS-C 1.3.0–1.5.1 (vulnerable) with fix in 1.6.0. Impact is improper authorization (control-plane)...
CVE-2024-24966 F5OS vulnerability
When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-24966 F5OS vulnerability
When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-23607 F5OS QKView utility vulnerability
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-23607
CVE-2024-23607 affects F5OS QKView utility. An authenticated attacker can traverse directories to read files outside the QKView directory. Vulnerable: F5OS-QKView in F5OS-A (1.3.0–1.3.2) and F5OS-C (1.3.0–1.5.1) branches; fixed in F5OS-A 1.4.0 and F5OS-C 1.6.0 per K000132800/K000138353. CVSSv3 ba...
CVE-2024-23607 F5OS QKView utility vulnerability
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
K000133111: F5OS vulnerability CVE-2024-24966
Security Advisory Description When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. CVE-2024-24966 Impact This vulnerability may allow an LDAP authenticated attacker to bypass intended access restrictions. There is no data...
K000132800: F5OS QKView utility vulnerability CVE-2024-23607
Security Advisory Description A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. CVE-2024-23607 Impact An authenticated attacker may exploit this vulnerability by executing a crafted QKView utilit...
PT-2024-2725 · F5 · F5Os
Name of the Vulnerable Software and Affected Versions: F5OS affected versions not specified Description: The issue is related to the implementation of the LDAP protocol in F5OS, which is associated with deficiencies in the authorization mechanism. When LDAP remote authentication is configured, a...
CVE-2023-36494
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2023-36494
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Design/Logic Flaw
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2023-36494 F5OS-A vulnerability
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2023-36494 F5OS-A vulnerability
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2023-36494
The CVE-2023-36494 issue affects F5OS-A, specifically audit-service on F5OS-A 1.4.0 with a path to 1.5.0. The vulnerability allows authenticated, high-privilege users with local access to read undisclosed sensitive information from audit logs. CVSSv3 base score is 4.4 (Medium) with local attack v...
K000135479: Overview of F5 vulnerabilities (August 2023)
Security Advisory Description On August 2, 2023, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles. Important :...
K000134922: F5OS-A vulnerability CVE-2023-36494
Security Advisory Description Audit logs on the F5OS-A system may contain undisclosed sensitive information. CVE-2023-36494 Impact This vulnerability may allow a high privileged authenticated attacker with local access to an F5OS-A system to read undisclosed sensitive information. Security Adviso...
PT-2023-25593 · F5 · F5Os-A
Name of the Vulnerable Software and Affected Versions: F5OS-A affected versions not specified Description: Audit logs on F5OS-A may contain undisclosed sensitive information. Software versions that have reached End of Technical Support EoTS are not evaluated. Recommendations: At the moment, there...
K000134706: Python IDNA vulnerability CVE-2022-45061
Security Advisory Description An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of...
K000133070: Freetype vulnerability CVE-2020-15999
Security Advisory Description Freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng. CVE-2020-15999 Impact Certain library in F5OS requires the use of the vulnerable component. However, there is no known way to exploit this vulnerability on F5OS in default, standard, or...