K57555833: BIG-IP APM vulnerability CVE-2022-27634

Security Advisory Description BIG-IP APM does not properly validate configurations, allowing an authenticated attacker with high privileges to manipulate the APM policy leading to privilege escalation/remote code execution. CVE-2022-27634 Impact This vulnerability may allow an authenticated...

CVE-2022-27634

CVE-2022-27634 (BIG-IP APM) affects F5 BIG-IP APM where an authenticated, high-privilege user can manipulate APM policy due to improper configuration validation, enabling privilege escalation and possible remote code execution. Affected versions include 16.1.0–16.1.2.2 and 15.1.0–15.1.5, with fix...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K57555833)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.5.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K57555833 advisory. - On 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, BIG-IP APM does not properl...