CVE Vulnerabilities

CVE-2023-38418

Improper Verification of Cryptographic Signature

Published: Aug 02, 2023 | Modified: Aug 08, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Affected Software

Name Vendor Start Version End Version
Access_policy_manager_clients F5 7.2.3 (including) 7.2.4.3 (excluding)
Big-ip_access_policy_manager F5 13.1.0 (including) 13.1.5 (including)
Big-ip_access_policy_manager F5 14.1.0 (including) 14.1.5 (including)
Big-ip_access_policy_manager F5 15.1.0 (including) 15.1.9 (including)
Big-ip_access_policy_manager F5 16.1.0 (including) 16.1.3 (including)
Big-ip_access_policy_manager F5 17.0.0 (including) 17.1.0 (including)

References