We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-23976

BIG-IP Appliance mode iAppsLX vulnerability



Description

When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Reserved 2024-02-01 | Published 2024-02-14 | Updated 2024-08-01 | Assigner f5


MEDIUM: 6.0CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Problem types

CWE-266 Incorrect Privilege Assignment

Product status

Default status
unknown

17.1.0 before 17.1.1
affected

16.1.0 before 16.1.4
affected

15.1.0 before 15.1.9
affected

Credits

F5 finder

References

my.f5.com/manage/s/article/K91054692 vendor-advisory

cve.org (CVE-2024-23976)

nvd.nist.gov (CVE-2024-23976)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-23976

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.