BIG IP Next Central Manager

DATE	CVE	VULNERABILITY TITLE	RISK
2024-08-14	CVE-2024-37028	Improper Authentication vulnerability in F5 Big-Ip Next Central Manager BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. network low complexity f5 CWE-287	5.3
2024-08-14	CVE-2024-39809	Insufficient Session Expiration vulnerability in F5 Big-Ip Next Central Manager 20.1.0 The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated network low complexity f5 CWE-613	8.8
2024-08-14	CVE-2024-41719	Information Exposure Through Log Files vulnerability in F5 Big-Ip Next Central Manager When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. local low complexity f5 CWE-532	5.5