CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It affects BIG-IP. Exploitation may require the attacker to be authenticated.
CVE
CVE-2021-23015
Severity
HIGH
CVSS
7.2
EPSS
1.34%
BIG-IP
Original NVD Description
On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the 'Administrator' role may be able to bypass Appliance Mode restrictions utilizing undisclosed iControl REST endpoints. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Related CVEs
Other vulnerabilities affecting the same vendor(s)