Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2024-28883

BIG-IP APM browser network access VPN client vulnerability

Description

An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP Edge Client

Default version status: unknown

  • 7.2.3 to < 7.2.4.4affected

F5 BIG-IP

Default version status: unknown

  • 17.1.0 to < 17.1.1affected
  • 16.1.0 to < 16.1.4.2affected
  • 15.1.0 to < 15.1.10.3affected

References