First published: Wed May 03 2023(Updated: )
An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system.
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP APM | >=17.0.0<=17.1.0=3 | 17.1.0.2 |
F5 BIG-IP APM | >=16.1.0<=16.1.3=3 | 16.1.3.5 |
F5 BIG-IP APM | =15.1.0 | 15.1.9 |
F5 BIG-IP APM | >=14.1.0<=14.1.5=3 | 14.1.5.5 |
F5 BIG-IP APM | >=13.1.0<=13.1.5=3 | |
F5 BIG-IP APM Clients | =7.2.1 | 7.2.4.14 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of F5-K000132539 is rated as high due to the potential for an attacker to impersonate a BIG-IP APM system.
To fix F5-K000132539, you must upgrade to the recommended software versions specified in the advisory.
F5-K000132539 affects multiple versions of BIG-IP APM including 17.0.0, 16.1.0, 15.1.0, 14.1.0, and 13.1.0.
Failing to address F5-K000132539 could allow attackers to exploit the vulnerability and gain unauthorized access to sensitive systems.
There are no official workarounds for F5-K000132539; upgrading to the fixed versions is recommended.