CVE-2024-23976: BIG-IP Appliance mode iAppsLX vulnerability
When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Other sources
When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary.
— F5
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.1.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.1.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.1.9
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23976?
CVE-2024-23976 is rated as a critical vulnerability due to its potential impact on system security.
How do I fix CVE-2024-23976?
To mitigate CVE-2024-23976, upgrade to the latest patched version of the F5 BIG-IP software as recommended in the security advisory.
What systems are affected by CVE-2024-23976?
CVE-2024-23976 affects multiple versions of the F5 BIG-IP, including versions 15.1.0 to 15.1.9, 16.1.0 to 16.1.4, and 17.1.0.
What are the risks associated with CVE-2024-23976?
An authenticated attacker with the Administrator role could exploit CVE-2024-23976 to bypass Appliance mode restrictions on the BIG-IP system.
Is there a workaround for CVE-2024-23976?
There are no confirmed workarounds for CVE-2024-23976, hence upgrading to a secure version is the only recommended approach.