Lucene search

F5F5:K000138047

HistoryFeb 14, 2024 - 12:00 a.m.

K000138047 : BIG-IP Advanced WAF and BIG-IP ASM Configuration utility vulnerability CVE-2024-23603

2024-02-1400:00:00

my.f5.com

big-ip

waf

asm

sql injection

vulnerability

configuration utility

authenticated attacker

cve-2024-23603

8.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Security Advisory Description

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. (CVE-2024-23603)

Impact

An authenticated attacker can exploit this vulnerability to execute malicious SQL statements through the BIG-IP Configuration utility.

CPENameOperatorVersion
big-ip next central managereq20.0.1
big-ip next central managereq20.0.2
big-ip next central managereq20.1.0
big-ip next cgnat cnfeq1.1.0
big-ip next cgnat cnfeq1.1.1
big-ip next cgnat cnfeq1.2.0
big-ip next cgnat cnfeq1.2.1
big-ip next dns cnfeq1.1.0
big-ip next dns cnfeq1.1.1
big-ip next dns cnfeq1.2.0

Name	Operator	Version
big-ip next central manager	eq	20.0.1
big-ip next central manager	eq	20.0.2
big-ip next central manager	eq	20.1.0
big-ip next cgnat cnf	eq	1.1.0
big-ip next cgnat cnf	eq	1.1.1
big-ip next cgnat cnf	eq	1.2.0
big-ip next cgnat cnf	eq	1.2.1
big-ip next dns cnf	eq	1.1.0
big-ip next dns cnf	eq	1.1.1
big-ip next dns cnf	eq	1.2.0

Rows per page:

1-10 of 4111