F5-K000132539: High severity f5 big-ip access policy manager vulnerability
Published May 3, 2023
·Updated
An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system.
Affected Software
6 affected componentsFixes available
F5 BIG-IP APM>=17.0.0<=17.1.0, =3
17.1.0.2
F5 BIG-IP APM>=16.1.0<=16.1.3, =3
16.1.3.5
F5 BIG-IP APM=15.1.0
15.1.9
F5 BIG-IP APM>=14.1.0<=14.1.5, =3
14.1.5.5
F5 BIG-IP APM>=13.1.0<=13.1.5, =3
F5 BIG-IP APM Clients=7.2.1
7.2.4.14
Event History
May 3, 2023
Advisory Published
via F5·12:57 PM
Frequently Asked Questions
1
What is the severity of F5-K000132539?
The severity of F5-K000132539 is rated as high due to the potential for an attacker to impersonate a BIG-IP APM system.
2
How do I fix F5-K000132539?
To fix F5-K000132539, you must upgrade to the recommended software versions specified in the advisory.
3
Which versions are affected by F5-K000132539?
F5-K000132539 affects multiple versions of BIG-IP APM including 17.0.0, 16.1.0, 15.1.0, 14.1.0, and 13.1.0.
4
What are the risks of not addressing F5-K000132539?
Failing to address F5-K000132539 could allow attackers to exploit the vulnerability and gain unauthorized access to sensitive systems.
5
Is there a workaround for F5-K000132539?
There are no official workarounds for F5-K000132539; upgrading to the fixed versions is recommended.