F5-K000138634: High severity f5 big-ip next central manager vulnerability
Published May 8, 2024
·Updated
BIG-IP Next Central Manager may allow an unauthenticated, remote attacker to obtain BIG-IP Next LTM/WAF instance credentials.
Affected Software
1 affected componentFixes available
F5 BIG-IP Next Central Manager>=20.0.1<=20.0.2
20.1.0
Event History
May 8, 2024
Advisory Published
via F5·12:48 PM
Frequently Asked Questions
1
What is the severity of F5-K000138634?
The severity of F5-K000138634 is critical due to the potential for unauthorized access to sensitive credentials.
2
How do I fix F5-K000138634?
To mitigate F5-K000138634, upgrade to the latest version of F5 BIG-IP Next Central Manager that is not vulnerable.
3
What versions are affected by F5-K000138634?
F5-K000138634 affects versions 20.0.1 to 20.1.0 of F5 BIG-IP Next Central Manager.
4
Who is at risk from the F5-K000138634 vulnerability?
Any organization using vulnerable versions of F5 BIG-IP Next Central Manager is at risk from F5-K000138634.
5
What has been disclosed in F5-K000138634?
F5-K000138634 discloses that an unauthenticated, remote attacker may obtain credentials for BIG-IP Next LTM/WAF instances.