CVE-2024-28132CWE-922

BIG-IP NEXT CNF vulnerability

Medium · published May 8, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-922 · Insecure Storage of Sensitive Information
Published
2024-05-08T15:01Z
EPSS history
Timeline
  • 08 MAY 15:01Z
    BIG-IP NEXT CNF vulnerability
    cvelistv5