6.8
Medium
CVE-2022-31473 In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated…
Description
In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIG-IP APM 17.0 | earliest → < 17.0.0 | 17.0.0 |
| BIG-IP APM 16.1 | 16.1.x → < 16.1.1 | 16.1.1 |
| BIG-IP APM 15.1 | 15.1.x → < 15.1.4 | 15.1.4 |
| BIG-IP APM 14.1 | earliest → < 14.1.0 | 14.1.0 |
| BIG-IP APM 13.1 | earliest → < 13.1.0 | 13.1.0 |
References
- support.f5.com support.f5.com
Timeline
- Published
- Last modified
Other CVEs of BIG-IP APM
The 12 CVEs of BIG-IP APM →
CVE-2022-35245
In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM…
7.5
High
CVE-2022-33203
In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access…
7.5
High
CVE-2022-29263
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to…
7.8
High
CVE-2022-28714
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to…
7.3
High