CVE-2022-34865: Traffic intelligence feeds vulnerability CVE-2022-34865
First published: Wed Aug 03 2022(Updated: )
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP Access Policy Manager | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Access Policy Manager | >=14.1.0<14.1.5 | |
| F5 BIG-IP Access Policy Manager | >=15.1.0<15.1.6.1 | |
| F5 BIG-IP Advanced Firewall Manager | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Advanced Firewall Manager | >=14.1.0<14.1.5 | |
| F5 BIG-IP Advanced Firewall Manager | >=15.1.0<15.1.6.1 | |
| F5 BIG-IP Analytics | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Analytics | >=14.1.0<14.1.5 | |
| F5 BIG-IP Analytics | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Application Acceleration Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Application Acceleration Manager | >=14.1.0<14.1.5 | |
| F5 Big-ip Application Acceleration Manager | >=15.1.0<15.1.6.1 | |
| F5 BIG-IP Application Security Manager | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Application Security Manager | >=14.1.0<14.1.5 | |
| F5 BIG-IP Application Security Manager | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Domain Name System | >=13.1.0<=13.1.5 | |
| F5 Big-ip Domain Name System | >=14.1.0<14.1.5 | |
| F5 Big-ip Domain Name System | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Fraud Protection Service | >=13.1.0<=13.1.5 | |
| F5 Big-ip Fraud Protection Service | >=14.1.0<14.1.5 | |
| F5 Big-ip Fraud Protection Service | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Global Traffic Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Global Traffic Manager | >=14.1.0<14.1.5 | |
| F5 Big-ip Global Traffic Manager | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Link Controller | >=13.1.0<=13.1.5 | |
| F5 Big-ip Link Controller | >=14.1.0<14.1.5 | |
| F5 Big-ip Link Controller | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Local Traffic Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Local Traffic Manager | >=14.1.0<14.1.5 | |
| F5 Big-ip Local Traffic Manager | >=15.1.0<15.1.6.1 | |
| F5 Big-ip Policy Enforcement Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Policy Enforcement Manager | >=14.1.0<14.1.5 | |
| F5 Big-ip Policy Enforcement Manager | >=15.1.0<15.1.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-34865?
CVE-2022-34865 is a vulnerability in BIG-IP versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x.
How severe is CVE-2022-34865?
CVE-2022-34865 has a severity rating of 9.1, which is considered critical.
Which software versions are affected by CVE-2022-34865?
CVE-2022-34865 affects the following software versions: BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager.
What is the vulnerability in CVE-2022-34865?
CVE-2022-34865 is a vulnerability in BIG-IP where Traffic Intelligence feeds do not verify the remote endpoint identity, allowing for potential data poisoning.
How can I fix CVE-2022-34865?
To fix CVE-2022-34865, update your BIG-IP software to version 15.1.6.1 for 15.1.x, version 14.1.5 for 14.1.x, or the latest version available for 13.1.x.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/f5
- canonical/f5 big-ip access policy manager
- version/f5 big-ip access policy manager/13.1.0
- version/f5 big-ip access policy manager/13.1.5
- version/f5 big-ip access policy manager/14.1.0
- version/f5 big-ip access policy manager/15.1.0
- canonical/f5 big-ip advanced firewall manager
- version/f5 big-ip advanced firewall manager/13.1.0
- version/f5 big-ip advanced firewall manager/13.1.5
- version/f5 big-ip advanced firewall manager/14.1.0
- version/f5 big-ip advanced firewall manager/15.1.0
- canonical/f5 big-ip analytics
- version/f5 big-ip analytics/13.1.0
- version/f5 big-ip analytics/13.1.5
- version/f5 big-ip analytics/14.1.0
- version/f5 big-ip analytics/15.1.0
- canonical/f5 big-ip application acceleration manager
- version/f5 big-ip application acceleration manager/13.1.0
- version/f5 big-ip application acceleration manager/13.1.5
- version/f5 big-ip application acceleration manager/14.1.0
- version/f5 big-ip application acceleration manager/15.1.0
- canonical/f5 big-ip application security manager
- version/f5 big-ip application security manager/13.1.0
- version/f5 big-ip application security manager/13.1.5
- version/f5 big-ip application security manager/14.1.0
- version/f5 big-ip application security manager/15.1.0
- canonical/f5 big-ip domain name system
- version/f5 big-ip domain name system/13.1.0
- version/f5 big-ip domain name system/13.1.5
- version/f5 big-ip domain name system/14.1.0
- version/f5 big-ip domain name system/15.1.0
- canonical/f5 big-ip fraud protection service
- version/f5 big-ip fraud protection service/13.1.0
- version/f5 big-ip fraud protection service/13.1.5
- version/f5 big-ip fraud protection service/14.1.0
- version/f5 big-ip fraud protection service/15.1.0
- canonical/f5 big-ip global traffic manager
- version/f5 big-ip global traffic manager/13.1.0
- version/f5 big-ip global traffic manager/13.1.5
- version/f5 big-ip global traffic manager/14.1.0
- version/f5 big-ip global traffic manager/15.1.0
- canonical/f5 big-ip link controller
- version/f5 big-ip link controller/13.1.0
- version/f5 big-ip link controller/13.1.5
- version/f5 big-ip link controller/14.1.0
- version/f5 big-ip link controller/15.1.0
- canonical/f5 big-ip local traffic manager
- version/f5 big-ip local traffic manager/13.1.0
- version/f5 big-ip local traffic manager/13.1.5
- version/f5 big-ip local traffic manager/14.1.0
- version/f5 big-ip local traffic manager/15.1.0
- canonical/f5 big-ip policy enforcement manager
- version/f5 big-ip policy enforcement manager/13.1.0
- version/f5 big-ip policy enforcement manager/13.1.5
- version/f5 big-ip policy enforcement manager/14.1.0
- version/f5 big-ip policy enforcement manager/15.1.0