Medium · 4.3 CVE-2023-41964 EUVD-2023-46423GHSA-8jh5-9mhc-r5j5

BIG-IP and BIG-IQ Database Variable vulnerability

Published Oct 10, 2023 · Updated Sep 18, 2024 · Assigned by f5

Description

The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendor	Product	Affected	Fixed
F5	BIG-IP	16.1.0 – < 16.1.4, 15.1.0 – < 15.1.9, 14.1.0, 13.1.0	16.1.4
F5	BIG-IQ	8.1.0, 8.2.0 – < 8.2.0.1.0.13.97-ENG, 8.3.0 – < 8.3.0.0.12.118-ENG	8.2.0.1.0.13.97-ENG