CVE-2023-45219 MEDIUM

CVE-2023-45219: BIG-IP tmsh vulnerability

Vendor F5
Product BIG-IP
Weakness CWE-200 · Info exposure
Published October 10, 2023
Last update September 18, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Exposure of Sensitive Information vulnerability exist in an undisclosed BIG-IP TMOS shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Key dates

02Disclosure timeline

October 10, 2023 CVE published
September 18, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-22203 wpDiscuz before 7.6.47 - Options Export Leaks OAuth Secrets in Plaintext CVE-2025-14197 Verysync 微力同步 Web Administration f96956469e7be39d information disclosure CVE-2022-39029 Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -1 CVE-2023-3709 Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure CVE-2024-33538 WordPress Assistant – Every Day Productivity Apps plugin <= 1.4.9.1 - Sensitive Data Exposure vulnerability