DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
F5 BIG-IP: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-08-14
Ein Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen und vertrauliche Informationen offenzulegen.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41727US | high7.5 | — | ||
In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resou… | ||||
| CVE-2024-41719US | medium5.5 | — | ||
When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs. Note: Software… | ||||
| CVE-2024-41164US | high7.5 | — | ||
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to termi… | ||||
| CVE-2024-39809US | high8.8 | — | ||
The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated | ||||
| CVE-2024-39778US | high7.5 | — | ||
When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate.
Note: Software versions which hav… | ||||
| CVE-2024-37028US | medium5.3 | — | ||
BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have reached End of Technical Support (EoTS)… | ||||
| CVE-2024-37891US | medium6.5 | — | ||
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- F5 Security Advisory vom 2024-08-14external
- F5 Security Advisory vom 2024-08-14external
- F5 Security Advisory vom 2024-08-14external
- F5 Security Advisory vom 2024-08-14external
- F5 Security Advisory vom 2024-08-14external
- F5 Security Advisory vom 2024-08-14external
- F5 Security Advisory vom 2024-08-14external
- WID-SEC-W-2024-1865 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan