CVE-2023-40537
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2023-40537 is a cyber vulnerability that affects the BIG-IP Configuration utility on a multi-blade VIPRION platform. The vulnerability allows an authenticated user's session cookie to remain valid for a limited time even after logging out. This vulnerability has a base severity rating of HIGH with a base score of 8.1, indicating its potential danger to organizations. The exploitability score is 2.2, and the impact score is 5.9. The vulnerability does not require any privileges and does not involve user interaction. It has a network attack vector and can have a significant impact on integrity and confidentiality. The CVSS vector string for this vulnerability is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Remediation steps are not mentioned in the provided information, but organizations using the affected products should consult with F5 Networks or their security providers for guidance on how to mitigate this vulnerability (source: [email protected]).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions