BIG-IP High Availability Update Issues
CVE-2024-22389

6.5MEDIUM

Key Information:

Vendor

F5

Status
Vendor
CVE Published:
14 February 2024

What is CVE-2024-22389?

The vulnerability presents a synchronization issue in F5 BIG-IP software when configured for high availability (HA). When an iControl REST API token is updated on one peer device, this change does not propagate to the corresponding peer device, potentially leading to inconsistencies in configuration and security controls across the HA environment. It is crucial for organizations to be aware of this issue, as it may affect the operational integrity and security of their network setups. Affected software versions are noted, and users are encouraged to consult the vendor advisory for further details and remediation guidance.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

BIG-IP 17.1.0 < 17.1.1

BIG-IP 16.1.0 < 16.1.4

BIG-IP 15.1.0 < 15.1.9

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
.