CVE-2024-23306: BIG-IP Next CNF & SPK vulnerability
A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Other sources
A vulnerability exists in BIG-IP Next CNF systems that may allow access to undisclosed sensitive files.
— F5
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23306?
CVE-2024-23306 is considered a high severity vulnerability due to the potential exposure of sensitive files.
How do I fix CVE-2024-23306?
To remediate CVE-2024-23306, upgrade your F5 BIG-IP Next CNF systems to the latest available version that is not affected.
Which products are affected by CVE-2024-23306?
CVE-2024-23306 affects the F5 BIG-IP Next Cloud-Native Network Functions software versions from 1.1.0 to 1.2.0.
Is there a workaround for CVE-2024-23306?
No specific workaround is documented for CVE-2024-23306; upgrading to a fixed version is recommended.
What are the risks of not addressing CVE-2024-23306?
Failing to address CVE-2024-23306 could result in unauthorized access to sensitive data stored on affected systems.