In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
Link | Resource |
---|---|
https://support.f5.com/csp/article/K34893234 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
10 Aug 2022, 23:36
Type | Values Removed | Values Added |
---|---|---|
First Time |
F5
F5 big-ip Access Policy Manager |
|
References | (MISC) https://support.f5.com/csp/article/K34893234 - Vendor Advisory | |
CPE | cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* cpe:2.3:a:f5:big-ip_access_policy_manager:16.1.0:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.7 |
04 Aug 2022, 18:34
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-08-04 18:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-31473
Mitre link : CVE-2022-31473
CVE.ORG link : CVE-2022-31473
JSON object : View
Products Affected
f5
- big-ip_access_policy_manager
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')