BIG-IP Edge Client for macOS vulnerability

CVE-2023-43611

7.8HIGH

Key Information

Vendor: F5
Status: Big-ip Edge Client
Vendor: CVE Published:; 10 October 2023

Summary

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerability is due to an incomplete fix for CVE-2023-38418. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected Version(s)

BIG-IP Edge Client < 7.2.4.4

Refferences

https://my.f5.com/manage/s/article/K000136185

vendor-advisory

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Oct 10, 2023
Vulnerability Reserved
Oct 5, 2023

Collectors

NVD DatabaseMitre Database

Credit

F5 acknowledges Mickey Jin (@patch1t) of Trend Micro for bringing this issue to our attention and following the highest standards of coordinated disclosure.