← Database

CVE-2024-41723

MEDIUM CVSS: 4.3 Published: 2024-08-14 Modified: 2026-06-17

Description

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Access Policy ManagerF5 Big-Ip Ssl OrchestratorF5 Big-Ip Container Ingress ServicesF5 Big-Ip Edge GatewayF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip AnalyticsF5 Big-Ip Global Traffic ManagerF5 Big-Ip WebacceleratorF5 Big-Ip Ddos Hybrid Defender

Weakness Type

CWE-200, NVD-CWE-noinfo

References