In short
- CVE-2023-24594 is a MEDIUM (CVSS 5.3) vulnerability affecting big-ip access policy manager (f5), big-ip advanced firewall manager (f5), big-ip advanced web application firewall (f5).
- Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.4% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
More vulnerabilities in big-ip access policy manager
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free