CVE-2023-28406
CVSS V2 None
CVSS V3 None
Description
A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an authenticated attacker to read files with .xml extension. Access to restricted information is limited and the attacker does not control what information is obtained.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Overview
- CVE ID
- CVE-2023-28406
- Assigner
- f5sirt@f5.com
- Vulnerability Status
- Awaiting Analysis
- Published Version
- 2023-05-03T15:15:12
- Last Modified Date
- 2023-05-03T15:23:46
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://my.f5.com/manage/s/article/K000132768 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-28406 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28406 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-05-03 16:01:54 | Added to TrackCVE | |||
| 2023-05-03 16:01:58 | Weakness Enumeration | new |