K47662005: BIG-IP Net HSM script vulnerability CVE-2022-28859

When installing Net HSM, the scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password. CVE-2022-28859 Impact This vulnerability may allow an authenticated attacker with network access to the Net HSM to use or delete private keys by accessing a...

CVE-2022-28859

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-28859

CVE-2022-28859 affects F5 BIG-IP: during Net HSM installation, the scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password. Public docs confirm affected versions include 14.1.x prior to 14.1.4.6, 15.1.x prior to 15.1.5.1, and 16.x prior to 16.1.0 (with...