Executive Summary

Informations
Name CVE-2023-42768 First vendor Publication 2023-10-10
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role is reverted back to a non-admin role via the Configuration utility, tmsh, or iControl REST. BIG-IP non-admin user can still have access to iControl REST admin resource.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42768

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 146
Application 134
Application 42
Application 136
Application 129
Application 156
Application 5
Application 5
Application 15
Application 131
Application 92
Application 123
Application 148
Application 145
Application 149
Application 134
Application 8
Application 102
Application 26
Hardware 7
Hardware 6

Sources (Detail)

https://my.f5.com/manage/s/article/K26910459
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
Date Informations
2024-11-28 14:29:21
  • Multiple Updates
2023-10-18 00:27:34
  • Multiple Updates
2023-10-10 17:27:21
  • First insertion