CVE-2022-34865: Traffic intelligence feeds vulnerability CVE-2022-34865

Q: What is CVE-2022-34865?

CVE-2022-34865 is a vulnerability in BIG-IP versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x.

Q: How severe is CVE-2022-34865?

CVE-2022-34865 has a severity rating of 9.1, which is considered critical.

Q: Which software versions are affected by CVE-2022-34865?

CVE-2022-34865 affects the following software versions: BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager.

Q: What is the vulnerability in CVE-2022-34865?

CVE-2022-34865 is a vulnerability in BIG-IP where Traffic Intelligence feeds do not verify the remote endpoint identity, allowing for potential data poisoning.

Q: How can I fix CVE-2022-34865?

To fix CVE-2022-34865, update your BIG-IP software to version 15.1.6.1 for 15.1.x, version 14.1.5 for 14.1.x, or the latest version available for 13.1.x.

Published Aug 4, 2022

Updated

In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Software

33 affected components

F5 BIG-IP Access Policy Manager>=13.1.0<=13.1.5

F5 BIG-IP Access Policy Manager>=14.1.0<14.1.5

F5 BIG-IP Access Policy Manager>=15.1.0<15.1.6.1

F5 BIG-IP Advanced Firewall Manager>=13.1.0<=13.1.5

F5 BIG-IP Advanced Firewall Manager>=14.1.0<14.1.5

F5 BIG-IP Advanced Firewall Manager>=15.1.0<15.1.6.1

F5 BIG-IP Analytics>=13.1.0<=13.1.5

F5 BIG-IP Analytics>=14.1.0<14.1.5

F5 BIG-IP Analytics>=15.1.0<15.1.6.1

F5 Big-ip Application Acceleration Manager>=13.1.0<=13.1.5

F5 Big-ip Application Acceleration Manager>=14.1.0<14.1.5

F5 Big-ip Application Acceleration Manager>=15.1.0<15.1.6.1

F5 BIG-IP Application Security Manager>=13.1.0<=13.1.5

F5 BIG-IP Application Security Manager>=14.1.0<14.1.5

F5 BIG-IP Application Security Manager>=15.1.0<15.1.6.1

F5 Big-ip Domain Name System>=13.1.0<=13.1.5

F5 Big-ip Domain Name System>=14.1.0<14.1.5

F5 Big-ip Domain Name System>=15.1.0<15.1.6.1

F5 Big-ip Fraud Protection Service>=13.1.0<=13.1.5

F5 Big-ip Fraud Protection Service>=14.1.0<14.1.5

F5 Big-ip Fraud Protection Service>=15.1.0<15.1.6.1

F5 Big-ip Global Traffic Manager>=13.1.0<=13.1.5

F5 Big-ip Global Traffic Manager>=14.1.0<14.1.5

F5 Big-ip Global Traffic Manager>=15.1.0<15.1.6.1

F5 Big-ip Link Controller>=13.1.0<=13.1.5

F5 Big-ip Link Controller>=14.1.0<14.1.5

F5 Big-ip Link Controller>=15.1.0<15.1.6.1

F5 Big-ip Local Traffic Manager>=13.1.0<=13.1.5

F5 Big-ip Local Traffic Manager>=14.1.0<14.1.5

F5 Big-ip Local Traffic Manager>=15.1.0<15.1.6.1

F5 Big-ip Policy Enforcement Manager>=13.1.0<=13.1.5

F5 Big-ip Policy Enforcement Manager>=14.1.0<14.1.5

F5 Big-ip Policy Enforcement Manager>=15.1.0<15.1.6.1

Event History

Aug 4, 2022

CVE Published

via MITRE·05:48 PM

Data Sourced

via MITRE·05:48 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-34865?

CVE-2022-34865 is a vulnerability in BIG-IP versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x.

How severe is CVE-2022-34865?

CVE-2022-34865 has a severity rating of 9.1, which is considered critical.

Which software versions are affected by CVE-2022-34865?