CVE-2024-23805
Last modified
CVE-2024-23805 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables avr.IncludeServerInURI or avr.CollectOnlyHostnameFromURI are enabled. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables avr.IncludeServerInURI or avr.CollectOnlyHostnameFromURI are enabled. For BIG-IP Advanced WAF and ASM, this may occur when either a DoS or Bot Defense profile is configured on a virtual server and the DB variables avr.IncludeServerInURI or avr.CollectOnlyHostnameFromURI are enabled. Note: The DB variables avr.IncludeServerInURI and avr.CollectOnlyHostnameFromURI are not enabled by default. For more information about the HTTP Analytics profile and the Collect URLs setting, refer to K30875743: Create a new Analytics profile and attach it to your virtual servers https://my.f5.com/manage/s/article/K30875743 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Advanced Web Application Firewall | >= 15.1.0, < 15.1.10 |
| F5 | Big-Ip Advanced Web Application Firewall | >= 16.1.0, < 16.1.4 |
| F5 | Big-Ip Advanced Web Application Firewall | 17.1.0 |
| F5 | Big-Ip Application Security Manager | >= 15.1.0, < 15.1.10 |
| F5 | Big-Ip Application Security Manager | >= 16.1.0, < 16.1.4 |
| F5 | Big-Ip Application Security Manager | 17.1.0 |
References
- https://my.f5.com/manage/s/article/K000137334Vendor Advisory
- https://my.f5.com/manage/s/article/K000137334Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-23805?
How severe is CVE-2024-23805?
How do I fix CVE-2024-23805?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-2380Stored XSS in graph rendering in Checkmk <2.3.0b4.5.4
- CVE-2024-23800A vulnerability has been identified in Tecnomatix Plant Simu…5.5
- CVE-2024-23801A vulnerability has been identified in Tecnomatix Plant Simu…5.5
- CVE-2024-23802A vulnerability has been identified in Tecnomatix Plant Simu…7.8
- CVE-2024-23803A vulnerability has been identified in Tecnomatix Plant Simu…7.8
- CVE-2024-23804A vulnerability has been identified in Tecnomatix Plant Simu…7.8
- CVE-2024-23806Sensitive data can be extracted from HID iCLASS SE reader co…5.3
- CVE-2024-23807The Apache Xerces C++ XML parser on versions 3.0.0 before 3.…9.8
- CVE-2024-23808in OpenHarmony v4.0.0 and prior versions allow a local attac…7.8
- CVE-2024-23809A double-free vulnerability exists in the BrainVision ASCII …9.8
- CVE-2024-2381The AliExpress Dropshipping with AliNext Lite plugin for Wor…8.8
- CVE-2024-23810A vulnerability has been identified in SINEC NMS (All versio…9.8
Are you affected by CVE-2024-23805?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST