F5-K000140574: Critical severity f5 f5os vulnerability
On an F5OS system, if the root user configures the system to allow login using SSH key-based authentication and later enables appliance mode, the system still allows access using SSH key-based authentication. For an attacker to exploit this vulnerability they must obtain possession of a private key corresponding to a previously-configured entry in root's SSH authorizedkeys file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000140574?
The severity of F5-K000140574 is classified as high due to the potential risk of unauthorized SSH access.
How do I fix F5-K000140574?
To fix F5-K000140574, disable SSH key-based authentication before enabling appliance mode on your F5OS system.
What products are affected by F5-K000140574?
F5-K000140574 affects F5OS-A versions 1.5.1 to 1.5.2 and F5OS-C versions 1.6.0 to 1.6.2.
What is the potential impact of F5-K000140574?
The potential impact of F5-K000140574 includes unauthorized access to the system if an attacker gains possession of the private SSH key.
Is there a workaround for F5-K000140574?
A recommended workaround for F5-K000140574 is to refrain from using SSH key-based authentication when appliance mode is enabled.