K38893457: BIG-IP DNS TMUI vulnerability CVE-2022-33947

Security Advisory Description A vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface TMUI that allows an authenticated attacker with at least operator role privileges to cause the Tomcat process to restart and perform unauthorized DNS requests and operatio...

F5 Networks BIG-IP : BIG-IP DNS TMUI vulnerability (K38893457)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.6.1 / 16.1.3 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K38893457 advisory. A vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface TM...

CVE-2022-33947

CVE-2022-33947 affects BIG-IP DNS TMUI (TMUI/DNS) in BIG-IP versions 16.0.x–16.1.2, 15.1.x, 14.1.x and 13.1.x; an authenticated operator can cause Tomcat restart and perform unauthorized DNS requests via undisclosed TMUI requests. Root cause: deserialization issue in TMUI leading to control-plane...