CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It affects BIG-IP.
CVE
CVE-2023-42768
Severity
HIGH
CVSS
7.2
EPSS
0.53%
BIG-IP
Original NVD Description
When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role is reverted back to a non-admin role via the Configuration utility, tmsh, or iControl REST. BIG-IP non-admin user can still have access to iControl REST admin resource. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Related CVEs
Other vulnerabilities affecting the same vendor(s)