CVE-2022-23026 in BIG-IP Advanced WAFinfo

Zusammenfassung

von MITRE • 25.01.2022

On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, an authenticated user with low privileges, such as a guest, can upload data using an undisclosed REST endpoint causing an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservieren

10.01.2022

Veröffentlichung

25.01.2022

Moderieren

akzeptiert

Eintrag

VDB-191621

CPE

bereit

EPSS

0.00739

KEV

nein

Aktivitäten

very low

Quellen

Do you know our Splunk app?

Download it now for free!