Medium WID-SEC-2023-2508 2 CVEs

F5 BIG-IP: Mehrere Schwachstellen

Published Sep 27, 2023 · Updated Sep 27, 2023 · de-DE

Vendor: F5 Product: BIG-IP

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um Informationen offenzulegen.

Product

F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.

Vulnerabilities 2

Medium 6.8

CVE-2023-43125

BIG-IP APM Clients TunnelCrack vulnerability

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

F5 BIG-IP Edge Client F5 Access Network devices Browsers

Sep 27, 2023
Medium 5.3

CVE-2023-43124

BIG-IP APM Clients TunnelCrack vulnerability

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

F5 BIG-IP Edge Client F5 Access Network devices Browsers

Sep 27, 2023

Revision history

2023-09-27 #1
Initiale Fassung

References

MyF5 Security Advisories vom 2023-09-27
https://my.f5.com/manage/s/article/K000136909
MyF5 Security Advisories vom 2023-09-27
https://my.f5.com/manage/s/article/K000136907