CVE-2024-39809

published 2024-08-14

CVE-2024-39809: The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS)…

high 8.9 CVSS 4.0

AV N AC H AT P PR N UI A VC H VI H VA H SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected

3 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_next_central_manager	—	—
f5	big-ip_next_central_manager	—	—
f5	big-ip_next_central_manager	>= 20.1.0 < 20.2.0	20.2.0

CWE-613