What is the severity of F5-K000132768?

The severity of F5-K000132768 is high due to its potential impact allowing unauthorized access to sensitive files.

How do I fix F5-K000132768?

To fix F5-K000132768, upgrade to the appropriate versions specified in the advisory for your affected BIG-IP product.

Who is affected by F5-K000132768?

F5-K000132768 affects users of the F5 BIG-IP and BIG-IQ Centralized Management products running specific vulnerable versions.

What kind of information can be accessed through F5-K000132768?

F5-K000132768 may allow attackers to read files with an .xml extension, potentially exposing configuration and sensitive data.

Is authentication required to exploit F5-K000132768?

Yes, F5-K000132768 requires authentication, meaning an attacker must be a logged-in user to exploit this vulnerability.

Vulnerability/
F5-K000132768

medium

4.3

3/5/2023

F5-K000132768

First published: Wed May 03 2023(Updated: )

A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that may allow an authenticated attacker to read files with an .xml extension. Access to restricted information is limited and the attacker does not control what information is obtained.

Affected Software	Affected Version	How to fix
F5 BIG-IP and BIG-IQ Centralized Management	=17.0.0	17.1.0
F5 BIG-IP and BIG-IQ Centralized Management	>=16.1.0<=16.1.3	16.1.3.4
F5 BIG-IP and BIG-IQ Centralized Management	>=15.1.0<=15.1.8	15.1.8.2
F5 BIG-IP and BIG-IQ Centralized Management	>=14.1.0<=14.1.5	14.1.5.4
F5 BIG-IP and BIG-IQ Centralized Management	>=13.1.0<=13.1.5

Never miss a vulnerability like this again

Reference Links

https://my.f5.com/manage/s/article/K000132768

Frequently Asked Questions

What is the severity of F5-K000132768?
The severity of F5-K000132768 is high due to its potential impact allowing unauthorized access to sensitive files.
How do I fix F5-K000132768?
To fix F5-K000132768, upgrade to the appropriate versions specified in the advisory for your affected BIG-IP product.
Who is affected by F5-K000132768?
F5-K000132768 affects users of the F5 BIG-IP and BIG-IQ Centralized Management products running specific vulnerable versions.
What kind of information can be accessed through F5-K000132768?
F5-K000132768 may allow attackers to read files with an .xml extension, potentially exposing configuration and sensitive data.
Is authentication required to exploit F5-K000132768?
Yes, F5-K000132768 requires authentication, meaning an attacker must be a logged-in user to exploit this vulnerability.

agent/references
agent/last-modified-date
agent/severity
agent/softwarecombine
agent/first-publish-date
agent/event
agent/type
agent/description
agent/source
agent/tags
collector/f5-advisory
source/F5
alias/CVE-2023-28406
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/f5
canonical/f5 big-ip and big-iq centralized management
version/f5 big-ip and big-iq centralized management/17.0.0
version/f5 big-ip and big-iq centralized management/16.1.0
version/f5 big-ip and big-iq centralized management/16.1.3
version/f5 big-ip and big-iq centralized management/15.1.0
version/f5 big-ip and big-iq centralized management/15.1.8
version/f5 big-ip and big-iq centralized management/14.1.0
version/f5 big-ip and big-iq centralized management/14.1.5
version/f5 big-ip and big-iq centralized management/13.1.0
version/f5 big-ip and big-iq centralized management/13.1.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of F5-K000132768?
The severity of F5-K000132768 is high due to its potential impact allowing unauthorized access to sensitive files.
How do I fix F5-K000132768?
To fix F5-K000132768, upgrade to the appropriate versions specified in the advisory for your affected BIG-IP product.
Who is affected by F5-K000132768?
F5-K000132768 affects users of the F5 BIG-IP and BIG-IQ Centralized Management products running specific vulnerable versions.
What kind of information can be accessed through F5-K000132768?
F5-K000132768 may allow attackers to read files with an .xml extension, potentially exposing configuration and sensitive data.
Is authentication required to exploit F5-K000132768?
Yes, F5-K000132768 requires authentication, meaning an attacker must be a logged-in user to exploit this vulnerability.