CVE-2024-39809CWE-613

BIG-IP Next Central Manager vulnerability

High · published August 14, 2024

CVSS v4.0
8.9
EPSS
0%
Percentile
37.0
In the wild
Unconfirmed
What it is

The Central Manager user session refresh token does not expire when a user logs out.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00438 · 37.0th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2024-08-14T14:32Z
EPSS history
Timeline
  • 14 AUG 14:32Z
    BIG-IP Next Central Manager vulnerability
    cvelistv5