The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allow a perpetrator to access confidential data.

🗓️ 07 Mar 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerabilities in multiple BIG-IP products enable remote access to confidential data due to data processing errors.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-22326	1 Feb 202320:14	–	circl
CNNVD	F5 BIG-IP 安全漏洞	1 Feb 202300:00	–	cnnvd
CNVD	F5 iControl REST and TMSH Privilege Management Improper Vulnerability	1 Feb 202300:00	–	cnvd
CVE	CVE-2023-22326	1 Feb 202317:53	–	cve
Cvelist	CVE-2023-22326 iControl REST and tmsh vulnerability	1 Feb 202317:53	–	cvelist
EUVD	EUVD-2023-26489	3 Oct 202520:07	–	euvd
F5 Networks	K83284425: iControl REST and tmsh vulnerability CVE-2023-22326	1 Feb 202313:12	–	f5
Tenable Nessus	F5 Networks BIG-IP : iControl REST and tmsh vulnerability (K83284425)	23 Jun 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	2 Feb 202300:00	–	ncsc
NVD	CVE-2023-22326	1 Feb 202318:15	–	nvd

Vulners

Node

f5_networks,big-ip_advanced_firewall_managerRange13.1.0–13.1.5

OR

f5_networks,big-ip_application_security_managerRange13.1.0–13.1.5

OR

f5_networks,big-ip_link_controllerRange13.1.0–13.1.5

OR

f5_networks,big-ip_local_traffic_managerRange13.1.0–13.1.5

OR

f5_networks,big-ip_policy_enforcement_managerRange13.1.0–13.1.5

OR

f5_networks,big-ip_fraud_protection_serviceRange13.1.0–13.1.5

OR

f5_networks,big-ip_ddos_hybrid_defenderRange13.1.0–13.1.5

OR

f5_networks,big-ip_ssl_orchestratorRange13.1.0–13.1.5

OR

f5_networks,big-ip_access_policy_managerRange13.1.0–13.1.5

OR

f5_networks,big-ip_analyticsRange13.1.0–13.1.5

OR

f5_networks,big-ip_application_acceleration_managerRange13.1.0–13.1.5

OR

f5_networks,big-ip_access_policy_managerRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_access_policy_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_access_policy_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_advanced_firewall_managerRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_advanced_firewall_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_advanced_firewall_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_analyticsRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_analyticsRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_analyticsRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_acceleration_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_application_acceleration_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_security_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_ddos_hybrid_defenderRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_ddos_hybrid_defenderRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_domain_name_systemRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_domain_name_systemRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_domain_name_systemRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_fraud_protection_serviceRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_link_controllerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_link_controllerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_local_traffic_managerRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_local_traffic_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_local_traffic_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_policy_enforcement_managerRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_policy_enforcement_managerRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_policy_enforcement_managerRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_ssl_orchestratorRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_ssl_orchestratorRange16.1.0–16.1.3.3

OR

f5_networks,big-ip_ssl_orchestratorRange17.0.0–17.0.0.2

OR

f5_networks,big-ip_application_security_managerRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_link_controllerRange14.1.0–14.1.5.3

OR

f5_networks,big-ip_access_policy_managerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_advanced_firewall_managerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_analyticsRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_application_acceleration_managerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_application_security_managerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_ddos_hybrid_defenderRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_domain_name_systemRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_fraud_protection_serviceRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_link_controllerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_local_traffic_managerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_policy_enforcement_managerRange15.1.0–15.1.8.1

OR

f5_networks,big-ip_ssl_orchestratorRange15.1.0–15.1.8.1

Source	Link
my	www.my.f5.com/manage/s/article/K83284425
web	www.web.nvd.nist.gov/view/vuln/detail

28 Nov 2023 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 34.9

CVSS 27.8

EPSS0.00521

Access Policy Manager Advanced Firewall Manager Analytics Application Acceleration Manager Application Security Manager Hybrid Defender Domain Name System Fraud Protection Service Link Controller Local Traffic Manager Policy Enforcement Manager Orchestrator Data Processing Errors