VDB
CVE-2024-41723
CVE-2024-41723
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
EPSS 0.30% · 22.4th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.30%
22.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| f5 | big-ip_fraud_protection_service | 15.1.0, 17.1.0, 16.1.0 |
| f5 | big-ip_domain_name_system | 15.1.0, 16.1.0, 17.1.0 |
| f5 | big-ip_application_visibility_and_reporting | 16.1.0, 17.1.0, 15.1.0 |
| f5 | big-ip_websafe | 17.1.0, 16.1.0, 15.1.0 |
| f5 | big-ip_advanced_web_application_firewall | 15.1.0, 17.1.0, 16.1.0 |
| f5 | big-ip_container_ingress_services | 16.1.0, 15.1.0, 17.1.0 |
| f5 | big-ip_webaccelerator | 15.1.0, 16.1.0, 17.1.0 |
| f5 | big-ip_ssl_orchestrator | 15.1.0, 16.1.0, 17.1.0 |
| f5 | big-ip_automation_toolchain | 15.1.0, 17.1.0, 16.1.0 |
| f5 | big-ip_local_traffic_manager | 16.1.0, 15.1.0, 17.1.0 |
| f5 | big-ip_link_controller | 15.1.0, 16.1.0, 17.1.0 |
| f5 | big-ip_edge_gateway | 17.1.0, 16.1.0, 15.1.0 |
| f5 | big-ip_ddos_hybrid_defender | 17.1.0, 15.1.0, 16.1.0 |
| f5 | big-ip_access_policy_manager | 15.1.0, 16.1.0, 17.1.0 |
| f5 | big-ip_application_security_manager | 17.1.0, 16.1.0, 15.1.0 |
| f5 | big-ip_policy_enforcement_manager | 15.1.0, 17.1.0, 16.1.0 |
| f5 | big-ip_global_traffic_manager | 17.1.0, 16.1.0, 15.1.0 |
| F5 | BIG-IP | 15.1.0, 16.1.0, 17.1.0 |
| f5 | big-ip_application_acceleration_manager | 15.1.0, 17.1.0, 16.1.0 |
| f5 | big-ip_carrier-grade_nat | 17.1.0, 16.1.0, 15.1.0 |
…and 2 more
Timeline
- Aug 14, 2024 CVE Published
- Aug 14, 2024 PoC Published
- Aug 15, 2024 EPSS Score
- Sep 5, 2024 EPSS Score
- Sep 26, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 16, 2024 EPSS Score
- Nov 6, 2024 EPSS Score
- Nov 27, 2024 EPSS Score
- Dec 19, 2024 EPSS Score
- Jan 9, 2025 EPSS Score
- Jan 29, 2025 EPSS Score
References
- https://my.f5.com/manage/s/article/K000140108 advisory
- https://my.f5.com/manage/s/article/K000138833 advisory
- https://my.f5.com/manage/s/article/K000139938 advisory
- https://my.f5.com/manage/s/article/K000138477 advisory
- https://my.f5.com/manage/s/article/K000140111 advisory
- https://my.f5.com/manage/s/article/K10438187 vendor-advisory
- https://my.f5.com/manage/s/article/K000140006 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-41723 advisory
- https://my.f5.com/manage/s/article/K05710614 advisory
- https://my.f5.com/manage/s/article/K000140529 advisory
- https://my.f5.com/manage/s/article/K000140552 advisory