← Database

CVE-2022-35243

HIGH CVSS: 8.7 Published: 2022-08-04 Modified: 2026-06-17

Description

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Global Traffic ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Domain Name SystemF5 Big-Ip AnalyticsF5 Big-Ip Link ControllerF5 Big-Ip Policy Enforcement Manager

Weakness Type

CWE-269

References