CVE-2015-4637
f5: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.
The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote authentication and the LDAP server allows anonymous BIND operations, allows remote attackers to obtain an authentication token for arbitrary users by guessing an LDAP user account name.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-17, CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- f5:big-iq_adc
- f5:big-iq_cloud
- f5:big-iq_device
- f5:big-iq_security