« Volver al listado

CVE-2024-28883

Estado: AnalizadaAlta (7.4)—

An origin validation vulnerability exists in

BIG-IP APM browser network access VPN client

for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

F5 — Big-ip Access Policy ManagerF5 — Big-ip Access Policy Manager Client

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-28883",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-28883",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-04T19:53:38.815787Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "f5sirt@f5.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.4,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "f5sirt@f5.com",
      "affectedData": [
        {
          "vendor": "F5",
          "product": "BIG-IP Edge Client",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.3",
              "lessThan": "7.2.4.4",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows",
            "Linux",
            "MacOS"
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "F5",
          "modules": [
            "APM"
          ],
          "product": "BIG-IP",
          "versions": [
            {
              "status": "affected",
              "version": "17.1.0",
              "lessThan": "17.1.1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "16.1.0",
              "lessThan": "16.1.4.2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "15.1.0",
              "lessThan": "15.1.10.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:f5:big-ip:*:*:*:*:*:*:*:*"
          ],
          "vendor": "f5",
          "product": "big-ip",
          "versions": [
            {
              "status": "affected",
              "version": "17.1.0"
            },
            {
              "status": "affected",
              "version": "16.1.0",
              "versionType": "custom",
              "lessThanOrEqual": "16.1.4"
            },
            {
              "status": "affected",
              "version": "15.1.0",
              "versionType": "custom",
              "lessThanOrEqual": "15.1.10"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:f5:apm_clients:*:*:*:*:*:*:*:*"
          ],
          "vendor": "f5",
          "product": "apm_clients",
          "versions": [
            {
              "status": "affected",
              "version": "7.2.3",
              "versionType": "custom",
              "lessThanOrEqual": "7.2.4"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-05-08T15:15:09.380",
  "references": [
    {
      "url": "https://my.f5.com/manage/s/article/K000138744",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "f5sirt@f5.com"
    },
    {
      "url": "https://my.f5.com/manage/s/article/K000138744",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "f5sirt@f5.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-346"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An origin validation vulnerability exists in \n\nBIG-IP APM browser network access VPN client \n\n\n\n for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de validación de origen en el cliente VPN de acceso a la red del navegador BIG-IP APM para Windows, macOS y Linux que puede permitir a un atacante eludir la inspección del endpoint F5. Nota: Las versiones de software que han llegado al final del soporte técnico (EoTS) no se evalúan."
    }
  ],
  "lastModified": "2026-06-17T07:21:57.897",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9A5FEFC-6A45-4C91-9CF2-D143C48C9977",
              "versionEndExcluding": "15.1.10.3",
              "versionStartIncluding": "15.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "091EC4DB-43EF-4CDA-B52B-9244F5340963",
              "versionEndExcluding": "16.1.4.2",
              "versionStartIncluding": "16.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:17.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A8D90B7-A1AF-4EFB-B688-1563D81E5C6D"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager_client:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1EA09C18-0CEC-4503-A84B-8B6D93EA11E1",
              "versionEndExcluding": "7.2.4.4",
              "versionStartIncluding": "7.2.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "f5sirt@f5.com"
}