The vulnerability of the HTTP Profile configuration in the BIG-IP application security server virtual machine allows a attacker to cause a service failure.

🗓️ 21 Feb 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Hypertext profile config flaw in BIG-IP VM allows remote service failure after lease expiry.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-22302	1 Feb 202320:14	–	circl
CNNVD	F5 BIG-IP 安全漏洞	1 Feb 202300:00	–	cnnvd
CNVD	F5 BIG-IP Denial of Service Vulnerability (CNVD-2023-05950)	1 Feb 202300:00	–	cnvd
CVE	CVE-2023-22302	1 Feb 202317:53	–	cve
Cvelist	CVE-2023-22302 BIG-IP HTTP profile vulnerability	1 Feb 202317:53	–	cvelist
EUVD	EUVD-2023-26465	3 Oct 202520:07	–	euvd
F5 Networks	K58550078: BIG-IP HTTP profile vulnerability CVE-2023-22302	9 Jan 202308:25	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP HTTP profile vulnerability (K58550078)	23 Jun 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	2 Feb 202300:00	–	ncsc
NVD	CVE-2023-22302	1 Feb 202318:15	–	nvd

Vulners

Node

f5_networks,big-ip_access_policy_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_advanced_firewall_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_analyticsRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_acceleration_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_domain_name_systemRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_fraud_protection_serviceRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_link_controllerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_local_traffic_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_policy_enforcement_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_ssl_orchestratorRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_access_policy_managerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_advanced_firewall_managerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_analyticsRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_application_acceleration_managerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_application_security_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_security_managerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_ddos_hybrid_defenderRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_ddos_hybrid_defenderRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_domain_name_systemRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_fraud_protection_serviceRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_link_controllerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_local_traffic_managerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_policy_enforcement_managerRange16.1.2.2–16.1.3

OR

f5_networks,big-ip_ssl_orchestratorRange16.1.2.2–16.1.3

Source	Link
my	www.my.f5.com/manage/s/article/K58550078
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-22302
vuldb	www.vuldb.com/ru/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023020611
web	www.web.nvd.nist.gov/view/vuln/detail

21 Feb 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25.4

CVSS 35.9

EPSS0.0053

Hypertext Transfer Protocol Profile configuration Virtual machine Resource lease expiry Remote attacker Service failure