Vulnerabilities > F5 > BIG IP Next Central Manager > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-14 CVE-2024-37028 Improper Authentication vulnerability in F5 Big-Ip Next Central Manager
BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
network
low complexity
f5 CWE-287
5.3
2024-08-14 CVE-2024-41719 Information Exposure Through Log Files vulnerability in F5 Big-Ip Next Central Manager
When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
local
low complexity
f5 CWE-532
5.5