BIG-IP ASM and Advanced WAF REST API endpoint vulnerability CVE-2022-23026

An authenticated user with low privileges, such as a guest, can upload data using an undisclosed REST endpoint causing an increase in disk resource utilization. (CVE-2022-23026)

Impact

An authenticated user with low privileges, such as a guest, may exploit this vulnerability to increase disk utilization, which may cause the Configuration utility to fail to function as expected. There is no data plane exposure; this is a control plane issue only.