F5-K87046687: Medium severity F5 BIG-IP vulnerability

Q: What level of attacker access is required for exploitation?

Exploitation requires local access, high privileges, and overcoming high attack complexity. No user interaction is required.

Q: What is the expected security impact if exploitation succeeds?

Successful exploitation can have high impact on confidentiality and integrity, while availability impact is rated as none. The impact remains within the affected security authority.

Published Dec 9, 2022

Updated

Affected Software

7 affected componentsFixes available

F5 BIG-IP=17.0.0

17.1.0

F5 BIG-IP>=16.1.0<=16.1.3

16.1.4

F5 BIG-IP>=15.1.0<=15.1.8

15.1.9

F5 BIG-IP>=14.1.0<=14.1.5

F5 BIG-IP>=13.1.0<=13.1.5

F5 BIG-IQ Centralized Management>=8.0.0<=8.4.0

8.4.1

F5 BIG-IQ Centralized Management=7.1.0

Event History

Dec 9, 2022

Advisory Published

via F5·01:52 AM

Frequently Asked Questions

What level of attacker access is required for exploitation?

Exploitation requires local access, high privileges, and overcoming high attack complexity. No user interaction is required.

What is the expected security impact if exploitation succeeds?