VDB
CVE-2023-5450
CVE-2023-5450
PUBLISHED
CVSS 7.300000190734863 HIGH
An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
EPSS 0.17% · 38.4th percentile
Risk Scores
CVSS v3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.17%
38.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| f5 | big-ip_access_policy_manager | 17.1.0, 13.1.0, 14.1.0 |
| f5 | access_policy_manager_clients | 7.2.3, 7.2.3 |
| F5 | BIG-IP Edge Client | 7.2.3, 7.2.3 |
| f5 | big-ip_access_policy_manager | 17.1.0, 16.1.0, 15.1.0 |
Timeline
- Oct 10, 2023 CVE Published
- Oct 10, 2023 PoC Published
- Oct 11, 2023 EPSS Score
- Nov 11, 2023 EPSS Score
- Dec 13, 2023 EPSS Score
- Jan 13, 2024 EPSS Score
- Feb 14, 2024 EPSS Score
- Mar 16, 2024 EPSS Score
- Apr 16, 2024 EPSS Score
- May 18, 2024 EPSS Score
- Jun 18, 2024 EPSS Score
- Jul 19, 2024 EPSS Score
References
- https://my.f5.com/manage/s/article/K000135040 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-5450 advisory
- https://my.f5.com/manage/s/article/K000137053 advisory