CVE-2024-45844 in f5 big-ip access policy manager
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected software: f5 big-ip access policy manager, f5 big-ip advanced firewall manager, f5 big-ip advanced web application firewall, f5 big-ip analytics, f5 big-ip application acceleration manager, f5 big-ip application security manager, f5 big-ip application visibility and reporting, f5 big-ip automation toolchain, f5 big-ip carrier-grade nat, f5 big-ip container ingress services
Scores
- CVSS: 8.6 (high)
- EPSS: 10.64% chance of exploitation in the next 30 days
- CISA KEV: Not listed
- Published: 2024-10-16
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.