F5 BIG-IP APM Vulnerability Allows Attackers to Bypass Endpoint Inspection
CVE-2024-28883
7.4HIGH
What is CVE-2024-28883?
A vulnerability in the F5 BIG-IP APM browser network access VPN client affects systems running on Windows, macOS, and Linux. This origin validation flaw may enable attackers to circumvent the endpoint inspection mechanisms, presenting a risk to the integrity of network security protocols. Implementing the appropriate software updates and measures is crucial for protecting affected systems, especially as software versions that have reached End of Technical Support are not evaluated for this vulnerability.
Affected Version(s)
BIG-IP 17.1.0 < 17.1.1
BIG-IP 16.1.0 < 16.1.4.2
BIG-IP 15.1.0 < 15.1.10.3