F5 BIG-IP APM Vulnerability Allows Attackers to Bypass Endpoint Inspection
CVE-2024-28883

7.4HIGH

Key Information:

Vendor

F5
Status
Big-ip Edge Client
Big-ip
Vendor
CVE Published:
8 May 2024

What is CVE-2024-28883?

A vulnerability in the F5 BIG-IP APM browser network access VPN client affects systems running on Windows, macOS, and Linux. This origin validation flaw may enable attackers to circumvent the endpoint inspection mechanisms, presenting a risk to the integrity of network security protocols. Implementing the appropriate software updates and measures is crucial for protecting affected systems, especially as software versions that have reached End of Technical Support are not evaluated for this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BIG-IP 17.1.0 < 17.1.1

BIG-IP 16.1.0 < 16.1.4.2

BIG-IP 15.1.0 < 15.1.10.3

References

https://my.f5.com/manage/s/article/K000138744
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F5
JSON
.