Skip to content
OpenAdvisories
Medium · 6.2 CVE-2024-24966 EUVD-2024-22329GHSA-fgh6-x5w4-82cg

F5OS vulnerability

Published Feb 14, 2024 · Updated Aug 1, 2024 · Assigned by f5

Description

When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 F5OS - Appliance 1.2.0 – < 1.3.0 1.3.0
F5 F5OS - Chassis 1.3.0 – < 1.6.0 1.6.0

References