PT-2023-21695 · F5 · Big-Ip

Published 2023-05-03 · Updated 2023-10-05 · CVE-2023-28406

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions BIG-IP (affected versions not specified)

Description A directory traversal issue exists in an undisclosed page of the BIG-IP Configuration utility. This may allow an authenticated attacker to read files with .xml extension. However, access to restricted information is limited, and the attacker does not control what information is obtained.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-28406

Affected Products

Big-Ip

References · 5

• https://osv.dev/vulnerability/CVE-2023-28406 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28406 · Security Note
• https://my.f5.com/manage/s/article/K000132768 · Vendor Advisory
• https://t.me/cvenotify/50165 · Telegram Post
• https://t.me/cvenotify/49732 · Telegram Post