Skip to content
fr Sign in
7.0 High

CVE-2023-22657 On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing…

Description

On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
F5OS-A 1.2 1.2.0 → < 1.3.0 1.3.0
F5OS-C 1.3 1.3.0 → < 1.5.0 1.5.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of F5OS-A

The 4 CVEs of F5OS-A →
CVE-2022-41835 In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an… 7.3 High CVE-2022-41780 In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an… 5.5 Medium CVE-2022-25990 On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally 5.3 Medium
Track this CVE