Podatność CVE-2023-46747
Publikacja: 2023-10-26

Opis:



Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Typ:

CWE-288

 (Authentication Bypass Using an Alternate Path or Channel)

 Referencje:
https://my.f5.com/manage/s/article/K000137353
Copyright 2024, cxsecurity.com

 

Back to Top