K83284425: iControl REST and tmsh vulnerability CVE-2023-22326

🗓️ 01 Feb 2023 13:12:13Reported by f5Type

f5🔗 my.f5.com👁 14 Views

iControl REST and tmsh permission assignment vulnerabilitie

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-22326	1 Feb 202320:14	–	circl
CNNVD	F5 BIG-IP 安全漏洞	1 Feb 202300:00	–	cnnvd
CNVD	F5 iControl REST and TMSH Privilege Management Improper Vulnerability	1 Feb 202300:00	–	cnvd
CVE	CVE-2023-22326	1 Feb 202317:53	–	cve
Cvelist	CVE-2023-22326 iControl REST and tmsh vulnerability	1 Feb 202317:53	–	cvelist
EUVD	EUVD-2023-26489	3 Oct 202520:07	–	euvd
Tenable Nessus	F5 Networks BIG-IP : iControl REST and tmsh vulnerability (K83284425)	23 Jun 202300:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	2 Feb 202300:00	–	ncsc
NVD	CVE-2023-22326	1 Feb 202318:15	–	nvd
OSV	CVE-2023-22326	1 Feb 202318:15	–	osv

Vulners

Node

f5 big-ip_next_spkRange17.0.0–17.1.0

OR

f5 big-ip_aamRange17.0.0–17.1.0

OR

f5 big-ip_afmRange17.0.0–17.1.0

OR

f5 big-ip_analyticsRange17.0.0–17.1.0

OR

f5 big-ip_apmRange17.0.0–17.1.0

OR

f5 big-ip_asmRange17.0.0–17.1.0

OR

f5 big-ip_ddos_hybrid_defenderRange17.0.0–17.1.0

OR

f5 big-ip_dnsRange17.0.0–17.1.0

OR

f5 big-ip_fpsRange17.0.0–17.1.0

OR

f5 big-ip_link_controllerRange17.0.0–17.1.0

OR

f5 big-ip_ltmRange17.0.0–17.1.0

OR

f5 big-ip_pemRange17.0.0–17.1.0

OR

f5 big-ip_ssl_orchestratorRange17.0.0–17.1.0

OR

f5 big-ip_next_spkRange16.1.0–16.1.3

OR

f5 big-ip_aamRange16.1.0–16.1.3

OR

f5 big-ip_afmRange16.1.0–16.1.3

OR

f5 big-ip_analyticsRange16.1.0–16.1.3

OR

f5 big-ip_apmRange16.1.0–16.1.3

OR

f5 big-ip_asmRange16.1.0–16.1.3

OR

f5 big-ip_ddos_hybrid_defenderRange16.1.0–16.1.3

OR

f5 big-ip_dnsRange16.1.0–16.1.3

OR

f5 big-ip_fpsRange16.1.0–16.1.3

OR

f5 big-ip_link_controllerRange16.1.0–16.1.3

OR

f5 big-ip_ltmRange16.1.0–16.1.3

OR

f5 big-ip_pemRange16.1.0–16.1.3

OR

f5 big-ip_ssl_orchestratorRange16.1.0–16.1.3

OR

f5 big-ip_next_spkRange15.1.0–15.1.8

OR

f5 big-ip_aamRange15.1.0–15.1.8

OR

f5 big-ip_afmRange15.1.0–15.1.8

OR

f5 big-ip_analyticsRange15.1.0–15.1.8

OR

f5 big-ip_apmRange15.1.0–15.1.8

OR

f5 big-ip_asmRange15.1.0–15.1.8

OR

f5 big-ip_ddos_hybrid_defenderRange15.1.0–15.1.8

OR

f5 big-ip_dnsRange15.1.0–15.1.8

OR

f5 big-ip_fpsRange15.1.0–15.1.8

OR

f5 big-ip_link_controllerRange15.1.0–15.1.8

OR

f5 big-ip_ltmRange15.1.0–15.1.8

OR

f5 big-ip_pemRange15.1.0–15.1.8

OR

f5 big-ip_ssl_orchestratorRange15.1.0–15.1.8

OR

f5 big-ip_next_spkRange14.1.0–14.1.5

OR

f5 big-ip_aamRange14.1.0–14.1.5

OR

f5 big-ip_afmRange14.1.0–14.1.5

OR

f5 big-ip_analyticsRange14.1.0–14.1.5

OR

f5 big-ip_apmRange14.1.0–14.1.5

OR

f5 big-ip_asmRange14.1.0–14.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange14.1.0–14.1.5

OR

f5 big-ip_dnsRange14.1.0–14.1.5

OR

f5 big-ip_fpsRange14.1.0–14.1.5

OR

f5 big-ip_link_controllerRange14.1.0–14.1.5

OR

f5 big-ip_ltmRange14.1.0–14.1.5

OR

f5 big-ip_pemRange14.1.0–14.1.5

OR

f5 big-ip_ssl_orchestratorRange14.1.0–14.1.5

OR

f5 big-ip_next_spkRange13.1.0–13.1.5

OR

f5 big-ip_aamRange13.1.0–13.1.5

OR

f5 big-ip_afmRange13.1.0–13.1.5

OR

f5 big-ip_analyticsRange13.1.0–13.1.5

OR

f5 big-ip_apmRange13.1.0–13.1.5

OR

f5 big-ip_asmRange13.1.0–13.1.5

OR

f5 big-ip_ddos_hybrid_defenderRange13.1.0–13.1.5

OR

f5 big-ip_dnsRange13.1.0–13.1.5

OR

f5 big-ip_fpsRange13.1.0–13.1.5

OR

f5 big-ip_link_controllerRange13.1.0–13.1.5

OR

f5 big-ip_ltmRange13.1.0–13.1.5

OR

f5 big-ip_pemRange13.1.0–13.1.5

OR

f5 big-ip_ssl_orchestratorRange13.1.0–13.1.5

12 Jul 2023 07:50Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.14.9

EPSS0.00446

SSVC

icontrol rest tmsh permission assignment vulnerability cve-2023-22326 authenticated attacker resource administrator sensitive information crafted request control plane