What is the severity of F5-K000139656?

F5-K000139656 is considered a critical vulnerability due to the potential for attackers to bypass endpoint inspection checks.

How do I fix F5-K000139656?

To fix F5-K000139656, upgrade your BIG-IP APM to versions 17.1.2, 16.1.5, or any appropriate patch released by F5.

What products are affected by F5-K000139656?

F5-K000139656 affects F5 BIG-IP APM versions including 17.1.0 to 17.1.1, 16.1.0 to 16.1.4, and 15.1.0 to 15.1.10.

What could an attacker accomplish by exploiting F5-K000139656?

By exploiting F5-K000139656, an attacker could potentially gain unauthorized access to VPN connections by bypassing security checks.

Is there a workaround for F5-K000139656 until a fix is applied?

Currently, there is no official workaround provided for F5-K000139656, making immediate patching essential.

Vulnerability/
F5-K000139656

low

5/2/2025

F5-K000139656

First published: Wed Feb 05 2025(Updated: )

A missing integrity check vulnerability exists in BIG-IP APM access policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connections initiated through the BIG-IP APM browser network access VPN client for Windows, macOS, and Linux.

Affected Software	Affected Version	How to fix
F5 BIG-IP Access Policy Manager	>=17.1.0<=17.1.1	17.1.2
F5 BIG-IP Access Policy Manager	>=16.1.0<=16.1.4	16.1.5
F5 BIG-IP Access Policy Manager	>=15.1.0<=15.1.10	-

Never miss a vulnerability like this again

Reference Links

https://my.f5.com/manage/s/article/K000139656

Frequently Asked Questions

What is the severity of F5-K000139656?
F5-K000139656 is considered a critical vulnerability due to the potential for attackers to bypass endpoint inspection checks.
How do I fix F5-K000139656?
To fix F5-K000139656, upgrade your BIG-IP APM to versions 17.1.2, 16.1.5, or any appropriate patch released by F5.
What products are affected by F5-K000139656?
F5-K000139656 affects F5 BIG-IP APM versions including 17.1.0 to 17.1.1, 16.1.0 to 16.1.4, and 15.1.0 to 15.1.10.
What could an attacker accomplish by exploiting F5-K000139656?
By exploiting F5-K000139656, an attacker could potentially gain unauthorized access to VPN connections by bypassing security checks.
Is there a workaround for F5-K000139656 until a fix is applied?
Currently, there is no official workaround provided for F5-K000139656, making immediate patching essential.

agent/references
agent/source
agent/severity
agent/last-modified-date
agent/first-publish-date
agent/description
agent/type
agent/softwarecombine
agent/tags
agent/event
collector/f5-advisory
source/F5
alias/CVE-2025-23415
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/f5
canonical/f5 big-ip access policy manager
version/f5 big-ip access policy manager/17.1.0
version/f5 big-ip access policy manager/17.1.1
version/f5 big-ip access policy manager/16.1.0
version/f5 big-ip access policy manager/16.1.4
version/f5 big-ip access policy manager/15.1.0
version/f5 big-ip access policy manager/15.1.10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.