Vulnerability Bulletins

K000132719 : BIG-IQ iControl REST vulnerability CVE-2023-29240


System information

   
Affected software F-Secure

Description

Security Advisory Description An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ system can upload arbitrary files using an undisclosed iControl REST endpoint. (CVE-2023-29240)

More info:

https://my.f5.com/manage/s/article/K000132719?utm_source=f5support&utm_medium=RSS

Standar resources

Property Value
CVE

Version history

Version Comments Date
1.0 Advisory issued 2023-05-04
Ministerio de Defensa
Presidencia española. Consejo de la Unión Europea
CNI
CCN
CCN-CERT