CVE:CVE-2023-28656
CNNVD:CNNVD-202305-156
F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。
F5 BIG-IP存在安全漏洞，该漏洞源于可能允许经过身份验证的攻击者访问其指定环境之外的配置对象。
solution:Upgrade f5 nginx_api_connectivity_manager to a higher version than 1.5.0,and avoid the version [1.0.0,1.5.0); Upgrade f5 nginx_instance_manager to a higher version than 2.9.0,and avoid the version [2.0.0,2.9.0); Upgrade f5 nginx_security_monitoring to a higher version than 1.3.0,and avoid the version [1.0.0,1.3.0)