CVE-2024-22389: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

CVE-2024-22389 is a security vulnerability affecting F5's BIG-IP systems when deployed in high availability (HA) configurations. The vulnerability occurs when an iControl REST API token is updated, as the change does not synchronize to the peer device. This vulnerability affects multiple versions of BIG-IP products including versions 15.1.0-15.1.9, 16.1.0-16.1.4, and 17.1.0 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.2 (High) by F5 Networks with a vector string of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, while NIST assigned a CVSS score of 6.5 (Medium) with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. The vulnerability is classified under CWE-613 (Insufficient Session Expiration) according to F5 Networks (NVD).

The vulnerability could potentially lead to security issues in high availability deployments where token updates are not properly synchronized between devices, potentially affecting the security state of the peer device (ASEC).

F5 has released updated versions to address this vulnerability. Users are advised to upgrade to versions 15.1.10, 16.1.4, or 17.1.1 depending on their current version (ASEC).