CVE-2022-23026

🗓️ 25 Jan 2022 19:11:26Reported by f5Type

CVE-2022-23026: BIG-IP ASM & Advanced WAF versions 12.1.x-16.1.x allow authenticated low-privilege users to upload data via undisclosed REST endpoint, causing increased disk resource utilization

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-23026	25 Jan 202220:15	–	attackerkb
Circl	CVE-2022-23026	25 Jan 202222:18	–	circl
CNNVD	F5 BIG-IP 代码问题漏洞	19 Jan 202200:00	–	cnnvd
CNVD	F5 BIG-IP code issue vulnerability (CNVD-2022-70623)	21 Jan 202200:00	–	cnvd
Cvelist	CVE-2022-23026	25 Jan 202219:11	–	cvelist
EUVD	EUVD-2022-28137	3 Oct 202520:07	–	euvd
F5 Networks	K08402414: BIG-IP ASM and Advanced WAF REST API endpoint vulnerability CVE-2022-23026	19 Dec 202222:05	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP ASM and Advanced WAF REST API endpoint vulnerability (K08402414)	19 Jan 202200:00	–	nessus
NCSC	Vulnerabilities fixed in F5 products	21 Jan 202200:00	–	ncsc
NVD	CVE-2022-23026	25 Jan 202220:15	–	nvd

NVD

Node

f5 big-ip_advanced_web_application_firewallRange12.1.0–12.1.6

f5 big-ip_advanced_web_application_firewallRange13.1.0–13.1.4

f5 big-ip_advanced_web_application_firewallRange14.1.0–14.1.4

f5 big-ip_advanced_web_application_firewallRange15.1.0–15.1.4

f5 big-ip_advanced_web_application_firewallRange16.0.0–16.1.1

f5 big-ip_application_acceleration_managerRange12.1.0–12.1.6

f5 big-ip_application_acceleration_managerRange13.1.0–13.1.4

f5 big-ip_application_acceleration_managerRange14.1.0–14.1.4

f5 big-ip_application_acceleration_managerRange15.1.0–15.1.4

f5 big-ip_application_acceleration_managerRange16.0.0–16.1.1

[
  {
    "product": "BIG-IP ASM & Advanced WAF",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K08402414

21 Nov 2024 06:47Current

4.9Medium risk

Vulners AI Score4.9

CVSS 24

CVSS 3.14.3

EPSS0.00296

CWE-434