CVE-2023-38418

Description

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Reserved 2023-07-17 | Published 2023-08-02 | Updated 2024-10-17 | Assigner f5

Problem types

CWE-347 Improper Verification of Cryptographic Signature

Product status

Default status
unknown

7.2.3 before 7.2.4.3
affected

Credits

F5 acknowledges Mickey Jin (@patch1t) of Trend Micro for bringing this issue to our attention and following the highest standards of coordinated disclosure. finder

References

my.f5.com/manage/s/article/K000134746 vendor-advisory

cve.org (CVE-2023-38418)

nvd.nist.gov (CVE-2023-38418)

Download JSON