Skip to content
OpenAdvisories
High · 7.4 CVE-2024-32049 EUVD-2024-29876GHSA-7grh-8hh5-88pf

BIG-IP Next Central Manager vulnerability

Published May 8, 2024 · Updated Aug 2, 2024 · Assigned by f5

Vendor: F5 Product: BIG-IP Next Central Manager Category: Network devices

Description

BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials. 

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP Next Central Manager 20.0.1 – < 20.1.0 20.1.0

Advisories 1

References