Input validation

2023-05-0315:15:00

PRIOn knowledge base

www.prio-n.com

improper validation

big-ip edge client

windows

macos

impersonation

apm system

nvd

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_access_policy_managerge7.2.2
big-ip_access_policy_managerlt7.2.4.1
big-ip_access_policy_managerge13.1.0
big-ip_access_policy_managerle13.1.5
big-ip_access_policy_managerge14.1.0
big-ip_access_policy_managerle14.1.5
big-ip_access_policy_managerge15.1.0
big-ip_access_policy_managerle15.1.8
big-ip_access_policy_managerge16.1.0
big-ip_access_policy_managerle16.1.3

Name	Operator	Version
big-ip_access_policy_manager	ge	7.2.2
big-ip_access_policy_manager	lt	7.2.4.1
big-ip_access_policy_manager	ge	13.1.0
big-ip_access_policy_manager	le	13.1.5
big-ip_access_policy_manager	ge	14.1.0
big-ip_access_policy_manager	le	14.1.5
big-ip_access_policy_manager	ge	15.1.0
big-ip_access_policy_manager	le	15.1.8
big-ip_access_policy_manager	ge	16.1.0
big-ip_access_policy_manager	le	16.1.3