VULNERABILITY INTELLIGENCE

CVE-2024-23976

CVSS score6 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2024-02-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Description

When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Weakness classification

  • CWE-266: Incorrect Privilege Assignment

Primary references