CVE-2024-23607
published 2024-02-14CVE-2024-23607: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note…
PriorityP428medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.50%
39.3th percentile
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | f5os | — | — |
| f5 | f5os-a | — | — |
| f5 | f5os-a | >= 1.3.0 < 1.4.0 | 1.4.0 |
| f5 | f5os-c | — | — |
| f5 | f5os-c | >= 1.3.0 < 1.6.0 | 1.6.0 |
| f5 | f5os_appliance | >= 1.3.0 < 1.4.0 | 1.4.0 |
| f5 | f5os_chassis | >= 1.3.0 < 1.6.0 | 1.6.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cpp3-849q-7wmj: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory
ghsa_unreviewed·2024-02-14
CVE-2024-23607 [MEDIUM] CWE-22 GHSA-cpp3-849q-7wmj: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
F5
CVE-2024-23607: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read f...
vendor_f5·2024-02-14·CVSS 5.5
CVE-2024-23607 [MEDIUM] CWE-22 CVE-2024-23607: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read f...
CVE-2024-23607: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read f...
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Products: F5OS, F5OS-A, F5OS-C
Affected Versions: 1.3.0 - 1.4.0; 1.3.0 - 1.6.0
F5 Advisory Articles: K000132800
F5 References: https://my.f5.com/manage/s/article/K000132800
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-02-14
Published