Aller au contenu
en Se connecter
6.8 Moyenne

CVE-2022-31473 In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated…

Description

In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Produits et versions touchés

Produit Versions touchées Corrigé en
BIG-IP APM 17.0 premières → < 17.0.0 17.0.0
BIG-IP APM 16.1 16.1.x → < 16.1.1 16.1.1
BIG-IP APM 15.1 15.1.x → < 15.1.4 15.1.4
BIG-IP APM 14.1 premières → < 14.1.0 14.1.0
BIG-IP APM 13.1 premières → < 13.1.0 13.1.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de BIG-IP APM

Les 12 CVE de BIG-IP APM →
CVE-2022-35245 In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM… 7.5 Élevée CVE-2022-33203 In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access… 7.5 Élevée CVE-2022-29263 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to… 7.8 Élevée CVE-2022-28714 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to… 7.3 Élevée
Suivre cette CVE