CVE-2024-33612

Published: May 8, 2024Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Exploitability: 1.6 / Impact: 5.2

Source: NVD

Description

An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (1)

Products: F5: Big Ip Next Central Manager

1 product

Big Ip Next Central Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Next Central Manager	From 20.0.1 to 20.2.0

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://my.f5.com/manage/s/article/K000139012

Source: f5sirt@f5.com

Vendor Advisory

https://my.f5.com/manage/s/article/K000139012

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.