K13213418 : BIG-IP monitor configuration vulnerability CVE-2022-35735

Security Advisory Description

An authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Configuration utility in an undisclosed manner, leading to a privilege escalation. (CVE-2022-35735)

Impact

This vulnerability may allow an authenticated Resource Administrator or Manager attacker with access to the Configuration utility to create a configuration that elevates their privileges to Administrator. There is no data plane exposure; this is a control plane issue only.