WID-SEC-W-2022-2104

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

F5 BIG-IP: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

view advisory published 2022-11-16

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-41800UShigh8.7Exploit
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an un…
CVE-2022-41622UShigh8.8Exploit
In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of Technic…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan