PT-2023-21695 · F5 · Big-Ip

Publicado 2023-05-03 · Atualizado 2023-10-05 · CVE-2023-28406

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions BIG-IP (affected versions not specified)

Description A directory traversal issue exists in an undisclosed page of the BIG-IP Configuration utility. This may allow an authenticated attacker to read files with .xml extension. However, access to restricted information is limited, and the attacker does not control what information is obtained.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-28406

Produtos afetados

Big-Ip

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-28406 · Aviso do Fabricante
• https://t.me/cvenotify/50165 · Publicação no Telegram
• https://t.me/cvenotify/49732 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-28406 · Nota de Segurança
• https://my.f5.com/manage/s/article/K000132768 · Aviso do Fabricante