K40019131 : F5 Access for Android vulnerability CVE-2022-27875

Security Advisory Description

A Task Hijacking vulnerability exists in the F5 Access for Android application, which may allow an attacker to steal sensitive user information. (CVE-2022-27875)

Impact

An attacker may be able to exploit this vulnerability by tricking a legitimate user running Android version 10 or below into downloading a malicious Android application and executing the malicious application prior to launching the legitimate F5 Access for Android application. The malicious application may then masquerade as the legitimate application in order to steal sensitive information such as usernames and passwords.