Skip to content
fr Sign in
8.8 High

CVE-2025-46265 On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may…

Description

On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
F5OS - Appliance 1.7 1.7.0 → < 1.8.0 1.8.0
F5OS - Appliance 1.5 1.5.1 → < 1.5.2 1.5.2
F5OS - Chassis 1.6 1.6.0 → < 1.8.0 1.8.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of F5OS - Appliance

The 12 CVEs of F5OS - Appliance →
CVE-2025-57780 A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to… 8.8 High CVE-2025-53860 A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive… 4.1 Medium CVE-2025-60015 An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption.  Note: Software… 5.7 Medium CVE-2025-61955 A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to… 8.8 High
Track this CVE