K80970653: BIG-IP iRules vulnerability CVE-2022-33962

Security Advisory Description The 'node' iRules command may allow an attacker to bypass the access control restrictions for a self IP address, regardless of the port lockdown settings.CVE-2022-33962 Impact This vulnerability may allow an authenticated attacker with the iRule Manager role to creat...

CVE-2022-33962

CVE-2022-33962 affects BIG-IP iRules: the node command may bypass access controls on a self IP, enabling privilege escalation for an authenticated attacker with iRules Manager role. Affected branches include BIG-IP all modules: 17.x (vulnerable), 16.x, 15.x, 14.x, and 13.x. Remediation: apply fix...

F5 Networks BIG-IP : BIG-IP iRules vulnerability (K80970653)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.1 / 15.1.6.1 / 16.1.3.1 / 17.0.0.1 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K80970653 advisory. - In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before...