Skip to content
OpenAdvisories

Product · F5

BIG-IP Next Central Manager

9 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 6.5

    BIG-IP Next Central Manager vulnerability

    When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central Manager API can cause the BIG-IP Next Central Manager Node's Kubernetes service to terminate. Note: Software versions which have reached End of Technical Support (EoT…

  • Medium 4.4

    BIG-IP Next Central Manager vulnerability

    When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive information in the pgaudit log files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • Medium 5.3

    BIG-IP Next Central Manager vulnerability

    BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • Medium 4.2

    BIG-IP Next Central Manager vulnerability

    When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • Medium 6.8

    BIG-IP Next Central Manager vulnerability

    An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.