CVE-2024-23306CWE-522

BIG-IP Next CNF & SPK vulnerability

High · published February 14, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-02-14T16:30Z
EPSS history
Timeline
  • 14 FEB 16:30Z
    BIG-IP Next CNF & SPK vulnerability
    cvelistv5