VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 14, 2024· Updated Aug 1, 2024

F5OS vulnerability

CVE-2024-24966

Description

When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

3
  • F5, Inc./F5os Allm-fuzzy
  • F5/F5OS - Appliancev5
    Range: 1.2.0
  • F5/F5OS - Chassisv5
    Range: 1.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.