First published: Thu Oct 26 2023(Updated: )
Undisclosed requests may bypass Configuration utility authentication.
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP and BIG-IQ Centralized Management | >=17.1.0<=17.1.1 | 17.1.1.1 |
F5 BIG-IP and BIG-IQ Centralized Management | >=16.1.0<=16.1.4 | 16.1.4.2 |
F5 BIG-IP and BIG-IQ Centralized Management | >=15.1.0<=15.1.10 | 15.1.10.3 |
F5 BIG-IP and BIG-IQ Centralized Management | >=14.1.0<=14.1.5 | 14.1.5.6 |
F5 BIG-IP and BIG-IQ Centralized Management | >=13.1.0<=13.1.5 | 13.1.5.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of F5-K000137353 is critical due to potential unauthorized access.
To fix F5-K000137353, upgrade to a patched version of the affected F5 BIG-IP software.
F5-K000137353 affects multiple versions, including 13.1.x, 14.1.x, 15.1.x, 16.1.x, and 17.1.x.
F5-K000137353 may allow attackers to bypass configuration utility authentication and gain unauthorized access.
There are no specific workarounds for F5-K000137353; upgrading is the recommended action.