mickmick.net

F5 BIG-IP Sensitive Information Disclosure Vulnerability

Release Date: 16 Aug 2024

RISK: High Risk

TYPE: Operating Systems - Networks OS

A vulnerability was identified in F5 BIG-IP, a remote attacker could exploit this vulnerability to trigger sensitive information disclosure on the targeted system.

 

Note:

No patch or mitigation is currently available for CVE-2024-39573 of the affected products.

---

Impact

• Security Restriction Bypass

---

System / Technologies affected

BIG-IP (all modules)

• version 15.1.0 - 15.1.10
• version 16.1.0 - 16.1.5
• version 17.1.0 - 17.1.1

 

F5OS-A

• version 1.5.1 - 1.5.2
• version 1.7.0

 

F5OS-C

• version 1.6.0 - 1.6.2

 

Traffix SDC

• version 5.1.0
• version 5.2.0

---

Solutions

• No solution was available at the time of this vulnerability

---

Vulnerability Identifier

• CVE-2024-39573

---

Source

• F5

---

Related Link

• https://my.f5.com/manage/s/article/K000140693