Description
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Metrics
CVSS 3.1 8.7/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| F5 | BIG-IP | >= 16.1.0, < 16.1.4; >= 15.1.0, < 15.1.9; >= 14.1.0, < *; >= 13.1.0, < * |
References
- https://my.f5.com/manage/s/article/K41072952Vendor Advisory
- https://my.f5.com/manage/s/article/K41072952Vendor Advisory
Timeline
- Published
- Oct 10, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified