Skip to content
7.5 High

CVE-2022-41836 When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed…

Description

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

Affected products and versions

Product Affected versions Fixed in
BIG-IP Advanced WAF & ASM 17.0 17.0.x → < 17.0.0.1 17.0.0.1
BIG-IP Advanced WAF & ASM 16.1 16.1.x → < 16.1.3.1 16.1.3.1
BIG-IP Advanced WAF & ASM 15.1 15.1.x → < 15.1.7 15.1.7
BIG-IP Advanced WAF & ASM 14.1 earliest → < 14.1.0 14.1.0
BIG-IP Advanced WAF & ASM 13.1 earliest → < 13.1.0 13.1.0

References

Timeline

  1. Published
  2. Last modified
The 3 CVEs of BIG-IP Advanced WAF & ASM →
Track this CVE