Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-41723 EUVD-2024-39167GHSA-4w7w-2j69-jj95

BIG-IP iControl REST vulnerability

Published Aug 14, 2024 · Updated Aug 16, 2024 · Assigned by f5

Description

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.1, 16.1.0 – < 16.1.5, 15.1.0 17.1.1

References