What is the severity of F5-K83284425?

The vulnerability F5-K83284425 is classified as a medium severity issue due to its potential for exposing sensitive information.

How do I fix F5-K83284425?

To fix F5-K83284425, upgrade to the appropriate patched version of the F5 BIG-IP software as specified in the advisory.

Who is affected by F5-K83284425?

F5-K83284425 affects authenticated users with resource administrator role privilege on specific versions of F5 BIG-IP.

What type of information can be exposed by F5-K83284425?

F5-K83284425 may allow the exposure of sensitive information accessible to users with limited access rights.

Is there a workaround for F5-K83284425?

Currently, the advised mitigation for F5-K83284425 is to apply the necessary patches rather than relying on workarounds.

Vulnerability/
F5-K83284425

medium

4.9

1/2/2023

12/7/2023

F5-K83284425

First published: Wed Feb 01 2023(Updated: )

Incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell (tmsh) dig command which may allow an authenticated attacker with resource administrator role privilege to view sensitive information.

Affected Software	Affected Version	How to fix
F5 BIG-IP and BIG-IQ Centralized Management	=17.0.0	17.1.0
F5 BIG-IP and BIG-IQ Centralized Management	>=16.1.0<=16.1.3	16.1.3.3
F5 BIG-IP and BIG-IQ Centralized Management	>=15.1.0<=15.1.8	15.1.8.1
F5 BIG-IP and BIG-IQ Centralized Management	>=14.1.0<=14.1.5	14.1.5.3
F5 BIG-IP and BIG-IQ Centralized Management	>=13.1.0<=13.1.5

Never miss a vulnerability like this again

Reference Links

https://my.f5.com/manage/s/article/K83284425

Frequently Asked Questions

What is the severity of F5-K83284425?
The vulnerability F5-K83284425 is classified as a medium severity issue due to its potential for exposing sensitive information.
How do I fix F5-K83284425?
To fix F5-K83284425, upgrade to the appropriate patched version of the F5 BIG-IP software as specified in the advisory.
Who is affected by F5-K83284425?
F5-K83284425 affects authenticated users with resource administrator role privilege on specific versions of F5 BIG-IP.
What type of information can be exposed by F5-K83284425?
F5-K83284425 may allow the exposure of sensitive information accessible to users with limited access rights.
Is there a workaround for F5-K83284425?
Currently, the advised mitigation for F5-K83284425 is to apply the necessary patches rather than relying on workarounds.

agent/references
agent/severity
agent/last-modified-date
agent/first-publish-date
agent/type
agent/description
agent/softwarecombine
agent/event
agent/source
agent/tags
collector/f5-advisory
source/F5
alias/CVE-2023-22326
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/f5
canonical/f5 big-ip and big-iq centralized management
version/f5 big-ip and big-iq centralized management/17.0.0
version/f5 big-ip and big-iq centralized management/16.1.0
version/f5 big-ip and big-iq centralized management/16.1.3
version/f5 big-ip and big-iq centralized management/15.1.0
version/f5 big-ip and big-iq centralized management/15.1.8
version/f5 big-ip and big-iq centralized management/14.1.0
version/f5 big-ip and big-iq centralized management/14.1.5
version/f5 big-ip and big-iq centralized management/13.1.0
version/f5 big-ip and big-iq centralized management/13.1.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of F5-K83284425?
The vulnerability F5-K83284425 is classified as a medium severity issue due to its potential for exposing sensitive information.
How do I fix F5-K83284425?
To fix F5-K83284425, upgrade to the appropriate patched version of the F5 BIG-IP software as specified in the advisory.
Who is affected by F5-K83284425?
F5-K83284425 affects authenticated users with resource administrator role privilege on specific versions of F5 BIG-IP.
What type of information can be exposed by F5-K83284425?
F5-K83284425 may allow the exposure of sensitive information accessible to users with limited access rights.
Is there a workaround for F5-K83284425?
Currently, the advised mitigation for F5-K83284425 is to apply the necessary patches rather than relying on workarounds.