CVE-2024-23976CWE-266

BIG-IP Appliance mode iAppsLX vulnerability

Medium · published February 14, 2024

CVSS v3.1
6.0
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance

mode restrictions utilizing iAppsLX templates on a BIG-IP system.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.7th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-02-14T16:30Z
EPSS history
Timeline
  • 14 FEB 16:30Z
    BIG-IP Appliance mode iAppsLX vulnerability
    cvelistv5