CVE-2022-41835: F5OS vulnerability CVE-2022-41835

Q: What is CVE-2022-41835?

CVE-2022-41835 is a vulnerability in F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0 that allows an authenticated local attacker to execute a limited set of commands in a container and impact the F5OS controller.

Q: What is the severity of CVE-2022-41835?

The severity of CVE-2022-41835 is high, with a CVSS score of 8.8.

Q: How does CVE-2022-41835 impact F5OS?

CVE-2022-41835 allows an authenticated local attacker to execute a limited set of commands in a container and impact the F5OS controller.

Q: What software versions are affected by CVE-2022-41835?

CVE-2022-41835 affects F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0.

Q: How can I fix CVE-2022-41835?

To fix CVE-2022-41835, update to F5OS-A version 1.1.0 or higher, or update to F5OS-C version 1.5.0 or higher.

Published Oct 19, 2022

Updated

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

Affected Software

2 affected components

F5 F5OS>=1.0.0<1.1.0

F5 F5OS>1.3.0<1.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade F5OS-A to a version that resolves this vulnerability.
Fixed in 1.1.0
Upgrade
Upgrade F5OS-C to a version that resolves this vulnerability.
Fixed in 1.5.0

Event History

Oct 19, 2022

CVE Published

via MITRE·09:24 PM

Data Sourced

via MITRE·09:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-41835?

CVE-2022-41835 is a vulnerability in F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0 that allows an authenticated local attacker to execute a limited set of commands in a container and impact the F5OS controller.

What is the severity of CVE-2022-41835?