K15101402 : iControl REST vulnerability CVE-2022-1468

Security Advisory Description

An authenticated iControl REST user with at least guest role privileges can cause processing delays to iControl REST requests via undisclosed requests. (CVE-2022-1468)

Impact

Processing delays to iControl REST requests can occur until the iControl REST daemon is either forced to restart or manually restarted. This vulnerability allows a remote authenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the iControl REST daemon. There is no data plane exposure; this is a control plane issue only.