← Database

CVE-2022-1468

MEDIUM CVSS: 4.3 Published: 2022-05-05 Modified: 2026-06-17

Description

On all versions of 17.0.x, 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x on F5 BIG-IP, an authenticated iControl REST user with at least guest role privileges can cause processing delays to iControl REST requests via undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected Platforms

F5 Big-Ip Global Traffic ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Domain Name SystemF5 Big-Ip AnalyticsF5 Big-Ip Link ControllerF5 Big-Ip Policy Enforcement Manager

Weakness Type

CWE-400

References