CVE-2023-28406 — BIG-IP Configuration utility vulnerability

Description (CNA)

A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an authenticated attacker to read files with .xml extension. Access to restricted information is limited and the attacker does not control what information is obtained. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / BIG-IP	unaffected 17.1.0 before ; affected 17.0.0 before ; affected 16.1.0 before 16.1.3.4; affected 15.1.0 before 15.1.8.2; affected 14.1.0 before 14.1.5.4; affected 13.1.0 before *

CWE

CWE-22

References

https://my.f5.com/manage/s/article/K000132768

ADP enrichment

CVE

No English description supplied.

https://my.f5.com/manage/s/article/K000132768

CISA-ADP

No English description supplied.

No references supplied.