CVE-2024-28132: BIG-IP NEXT CNF vulnerability
Exposure of a Sensitive Information vulnerability exists in the Global Server Load Balancing (GSLB) container, which may allow an authenticated attacker with administrator role privileges to view sensitive information.
Other sources
Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28132?
CVE-2024-28132 has been classified as a moderate severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2024-28132?
To fix CVE-2024-28132, update your F5 BIG-IP Next CNF to version 1.3.0 or later.
What types of sensitive information could be exposed in CVE-2024-28132?
CVE-2024-28132 may allow an authenticated attacker to view confidential data stored within the GSLB container.
What products are affected by CVE-2024-28132?
CVE-2024-28132 affects F5 BIG-IP Next Cloud-Native Network Functions version 1.2.0 to 1.2.1.
Are software versions that have reached End of Technical Support evaluated for CVE-2024-28132?
No, software versions that have reached End of Technical Support are not evaluated for CVE-2024-28132.