CVE-2024-21849

概要

参考情報

• my.f5.com/manage/s/article/K000135873 · Vendor Advisory

big-ip advanced web application firewall のその他の脆弱性

• CVE-2026-63020低 3.1A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: …
• CVE-2026-42937中 6.5Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl RE…
• CVE-2026-42930高 8.7When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restriction…
• CVE-2026-42924高 8.7An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP …
• CVE-2026-42920高 7.5When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic …