F5 BIG-IP APM Vulnerability Allows Attackers to Bypass Endpoint Inspection
CVE-2024-28883

7.4HIGH

Key Information:

Vendor
F5
Status
Big-ip Edge Client
Big-ip
Vendor
CVE Published:
8 May 2024

Summary

A vulnerability in the F5 BIG-IP APM browser network access VPN client affects systems running on Windows, macOS, and Linux. This origin validation flaw may enable attackers to circumvent the endpoint inspection mechanisms, presenting a risk to the integrity of network security protocols. Implementing the appropriate software updates and measures is crucial for protecting affected systems, especially as software versions that have reached End of Technical Support are not evaluated for this vulnerability.

Affected Version(s)

BIG-IP 17.1.0 < 17.1.1

BIG-IP 16.1.0 < 16.1.4.2

BIG-IP 15.1.0 < 15.1.10.3

References

https://my.f5.com/manage/s/article/K000138744
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
.