Description
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| F5 | BIG-IP | 16.1.0 – < 16.1.4, 15.1.0 – < 15.1.9, 14.1.0, 13.1.0 | 16.1.4 |
References
- https://my.f5.com/manage/s/article/K41072952 vendor-advisory