CVE-2023-43746

published 2023-10-10

CVE-2023-43746: When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP…

high 8.7 CVSS 3.1

AV N AC L PR H UI N S C C H I H A N

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a BIG-IP system. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected

76 ranges · showing 25

Vendor	Product	Version range	Fixed in
f5	big-ip	>= 13.1.0 < *	*
f5	big-ip	>= 14.1.0 < *	*
f5	big-ip	>= 15.1.0 < 15.1.9	15.1.9
f5	big-ip	>= 16.1.0 < 16.1.4	16.1.4
f5	big-ip_aam	—	—
f5	big-ip_access_policy_manager	13.1.0 – 14.1.5	—
f5	big-ip_access_policy_manager	>= 15.1.0 < 15.1.9	15.1.9
f5	big-ip_access_policy_manager	>= 16.1.0 < 16.1.4	16.1.4
f5	big-ip_advanced_firewall_manager	13.1.0 – 14.1.5	—
f5	big-ip_advanced_firewall_manager	>= 15.1.0 < 15.1.9	15.1.9
f5	big-ip_advanced_firewall_manager	>= 16.1.0 < 16.1.4	16.1.4
f5	big-ip_advanced_waf	—	—
f5	big-ip_advanced_web_application_firewall	13.1.0 – 14.1.5	—
f5	big-ip_advanced_web_application_firewall	>= 15.1.0 < 15.1.9	15.1.9
f5	big-ip_advanced_web_application_firewall	>= 16.1.0 < 16.1.4	16.1.4
f5	big-ip_afm	—	—
f5	big-ip_analytics	—	—
f5	big-ip_analytics	13.1.0 – 14.1.5	—
f5	big-ip_analytics	>= 15.1.0 < 15.1.9	15.1.9
f5	big-ip_analytics	>= 16.1.0 < 16.1.4	16.1.4
f5	big-ip_apm	—	—
f5	big-ip_application_acceleration_manager	13.1.0 – 14.1.5	—
f5	big-ip_application_acceleration_manager	>= 15.1.0 < 15.1.9	15.1.9
f5	big-ip_application_acceleration_manager	>= 16.1.0 < 16.1.4	16.1.4
f5	big-ip_application_security_manager	13.1.0 – 14.1.5	—

CWE-267