Lucene search

F5F5:K000132352

HistoryFeb 01, 2023 - 12:00 a.m.

K000132352 : OpenAM Vulnerability CVE-2023-22320

2023-02-0100:00:00

my.f5.com

openam

web policy agent

url parsing

vulnerability

cwe-22

cve-2023-22320

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Security Advisory Description

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly. (CVE-2023-22320)

Impact

There is no impact; F5 products are not affected by this vulnerability.

CPENameOperatorVersion
f5 ssl orchestratoreq14.1.0
f5 ssl orchestratoreq14.1.2
f5 ssl orchestratoreq14.1.4
f5 ssl orchestratoreq15.1.0
f5 ssl orchestratoreq15.1.1
f5 ssl orchestratoreq16.1.0
f5 ssl orchestratoreq16.1.1
f5 ssl orchestratoreq16.1.2
f5 ssl orchestratoreq16.1.3
f5 ssl orchestratoreq17.0.0

Name	Operator	Version
f5 ssl orchestrator	eq	14.1.0
f5 ssl orchestrator	eq	14.1.2
f5 ssl orchestrator	eq	14.1.4
f5 ssl orchestrator	eq	15.1.0
f5 ssl orchestrator	eq	15.1.1
f5 ssl orchestrator	eq	16.1.0
f5 ssl orchestrator	eq	16.1.1
f5 ssl orchestrator	eq	16.1.2
f5 ssl orchestrator	eq	16.1.3
f5 ssl orchestrator	eq	17.0.0

Rows per page:

1-10 of 3941