CVE-2023-22372: BIG-IP Edge Client for Windows and Mac OS vulnerability
Published May 3, 2023
·Updated
In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS.
Affected Software
14 affected componentsFixes available
F5 BIG-IP (APM)>=17.0.0<=17.1.0, =3
17.1.0.2
F5 BIG-IP (APM)>=16.1.0<=16.1.3, =3
16.1.3.5
F5 BIG-IP (APM)>=15.1.0<=15.1.8, =3
15.1.9
F5 BIG-IP (APM)>=14.1.0<=14.1.5, =3
14.1.5.5
F5 BIG-IP (APM)>=13.1.0<=13.1.5, =3
F5 BIG-IP APM Clients>=7.2.2<=7.2.4
7.2.4.14
F5 BIG-IP Access Policy Manager>=7.2.2<7.2.4.1
F5 BIG-IP Access Policy Manager>=13.1.0<=13.1.5
F5 BIG-IP Access Policy Manager>=14.1.0<=14.1.5
F5 BIG-IP Access Policy Manager>=15.1.0<=15.1.8
F5 BIG-IP Access Policy Manager>=16.1.0<=16.1.3
F5 BIG-IP Access Policy Manager>=17.0.0<=17.1.0
Apple macOS
Microsoft Windows
Event History
May 3, 2023
Advisory Published
via F5·12:29 PM
CVE Published
via MITRE·02:30 PM
Data Sourced
via MITRE·02:30 PM
DescriptionSeverityWeakness
Data Sourced
03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-22372?
CVE-2023-22372 is an improper enforcement of message integrity vulnerability in BIG-IP Edge Client for Windows and Mac OS.
2
Which software versions are affected by CVE-2023-22372?
CVE-2023-22372 affects F5 Big-IP Access Policy Manager versions 7.2.2 to 7.2.4.1, 13.1.0 to 13.1.5, 14.1.0 to 14.1.5, 15.1.0 to 15.1.8, 16.1.0 to 16.1.3, and 17.0.0 to 17.1.0.
3
What is the severity of CVE-2023-22372?
CVE-2023-22372 has a severity rating of 5.9 (medium).
4
How does CVE-2023-22372 impact Apple macOS?
CVE-2023-22372 does not impact Apple macOS.
5
How does CVE-2023-22372 impact Microsoft Windows?
CVE-2023-22372 does not impact Microsoft Windows.