Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv3

CVE-2022-1389

Published: 05/05/2022 Updated: 16/05/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Subscribe to Big-ip Local Traffic Manager

Vulnerability Summary

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP (fixed in 17.0.0), a cross-site request forgery (CSRF) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. This vulnerability allows an malicious user to run a limited set of commands: ping, traceroute, and WOM diagnostics. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 big-ip local traffic manager 11.6.1

f5 big-ip local traffic manager 12.1.2

f5 big-ip advanced firewall manager 12.1.0

f5 big-ip access policy manager 12.1.2

f5 big-ip global traffic manager 11.6.1

f5 big-ip domain name system 12.1.2

f5 big-ip policy enforcement manager 12.1.1

f5 big-ip policy enforcement manager 12.1.2

f5 big-ip advanced firewall manager 12.1.2

f5 big-ip application security manager 12.1.1

f5 big-ip access policy manager 12.1.0

f5 big-ip access policy manager 12.1.1

f5 big-ip advanced firewall manager 11.6.1

f5 big-ip advanced firewall manager 12.1.1

f5 big-ip analytics 11.6.1

f5 big-ip analytics 12.1.0

f5 big-ip analytics 12.1.2

f5 big-ip application acceleration manager 11.6.1

f5 big-ip application acceleration manager 12.1.0

f5 big-ip application acceleration manager 12.1.1

f5 big-ip application acceleration manager 12.1.2

f5 big-ip application security manager 11.6.1

f5 big-ip application security manager 12.1.0

f5 big-ip domain name system 12.1.0

f5 big-ip link controller 11.6.1

f5 big-ip link controller 12.1.0

f5 big-ip link controller 12.1.1

f5 big-ip link controller 12.1.2

f5 big-ip local traffic manager 12.1.0

f5 big-ip policy enforcement manager 11.6.1

f5 big-ip access policy manager 11.6.1

f5 big-ip access policy manager 13.1.0

f5 big-ip access policy manager 14.1.0

f5 big-ip advanced firewall manager 13.1.0

f5 big-ip advanced firewall manager 14.1.0

f5 big-ip advanced firewall manager 15.1.0

f5 big-ip analytics 12.1.1

f5 big-ip analytics 13.1.0

f5 big-ip analytics 14.1.0

f5 big-ip application acceleration manager 13.1.0

f5 big-ip application acceleration manager 14.1.0

f5 big-ip application acceleration manager 15.1.0

f5 big-ip application security manager 12.1.2

f5 big-ip application security manager 13.1.0

f5 big-ip application security manager 14.1.0

f5 big-ip domain name system 11.6.1

f5 big-ip domain name system 12.1.1

f5 big-ip domain name system 13.1.0

f5 big-ip domain name system 14.1.0

f5 big-ip fraud protection service 11.6.1

f5 big-ip fraud protection service 12.1.0

f5 big-ip fraud protection service 13.1.0

f5 big-ip fraud protection service 14.1.0

f5 big-ip global traffic manager 12.1.0

f5 big-ip global traffic manager 12.1.1

f5 big-ip global traffic manager 12.1.2

f5 big-ip global traffic manager 13.1.0

f5 big-ip global traffic manager 14.1.0

f5 big-ip link controller 13.1.0

f5 big-ip link controller 14.1.0

f5 big-ip local traffic manager 12.1.1

f5 big-ip local traffic manager 13.1.0

f5 big-ip local traffic manager 14.1.0

f5 big-ip local traffic manager 15.1.0

f5 big-ip policy enforcement manager 11.6.2

f5 big-ip policy enforcement manager 12.1.0

f5 big-ip policy enforcement manager 12.1.3

f5 big-ip policy enforcement manager 13.1.0

f5 big-ip policy enforcement manager 14.1.0

f5 big-ip policy enforcement manager 15.1.0

f5 big-ip access policy manager 11.6.2

f5 big-ip access policy manager 11.6.3

f5 big-ip access policy manager 11.6.4

f5 big-ip access policy manager 11.6.5

f5 big-ip access policy manager 12.1.3

f5 big-ip access policy manager 12.1.4

f5 big-ip access policy manager 12.1.5

f5 big-ip access policy manager 12.1.6

f5 big-ip access policy manager 13.1.1

f5 big-ip access policy manager 13.1.3

f5 big-ip access policy manager 13.1.4

f5 big-ip access policy manager 13.1.5

f5 big-ip access policy manager 14.1.2

f5 big-ip access policy manager 14.1.3

f5 big-ip access policy manager 14.1.4

f5 big-ip access policy manager 15.1.0

f5 big-ip access policy manager 15.1.1

f5 big-ip access policy manager 15.1.2

f5 big-ip access policy manager 15.1.3

f5 big-ip access policy manager 15.1.4

f5 big-ip access policy manager 15.1.5

f5 big-ip access policy manager 16.1.0

f5 big-ip access policy manager 16.1.1

f5 big-ip access policy manager 16.1.2

f5 big-ip access policy manager 17.0.0

f5 big-ip advanced firewall manager 11.6.2

f5 big-ip advanced firewall manager 11.6.3

f5 big-ip advanced firewall manager 11.6.4

f5 big-ip advanced firewall manager 11.6.5

f5 big-ip advanced firewall manager 12.1.3

f5 big-ip advanced firewall manager 12.1.4

f5 big-ip advanced firewall manager 12.1.5

f5 big-ip advanced firewall manager 12.1.6

f5 big-ip advanced firewall manager 13.1.1

f5 big-ip advanced firewall manager 13.1.3

f5 big-ip advanced firewall manager 13.1.4

f5 big-ip advanced firewall manager 13.1.5

f5 big-ip advanced firewall manager 14.1.2

f5 big-ip advanced firewall manager 14.1.3

f5 big-ip advanced firewall manager 14.1.4

f5 big-ip advanced firewall manager 15.1.1

f5 big-ip advanced firewall manager 15.1.2

f5 big-ip advanced firewall manager 15.1.3

f5 big-ip advanced firewall manager 15.1.4

f5 big-ip advanced firewall manager 15.1.5

f5 big-ip advanced firewall manager 16.1.0

f5 big-ip advanced firewall manager 16.1.1

f5 big-ip advanced firewall manager 16.1.2

f5 big-ip advanced firewall manager 17.0.0

f5 big-ip analytics 14.1.4

f5 big-ip analytics 15.1.0

f5 big-ip analytics 15.1.2

f5 big-ip analytics 15.1.3

f5 big-ip analytics 15.1.4

f5 big-ip analytics 15.1.5

f5 big-ip analytics 16.1.0

f5 big-ip analytics 16.1.1

f5 big-ip analytics 16.1.2

f5 big-ip analytics 17.0.0

f5 big-ip application acceleration manager 14.1.4

f5 big-ip application acceleration manager 16.1.0

f5 big-ip application security manager 14.1.4

f5 big-ip application security manager 15.1.0

f5 big-ip application security manager 16.1.0

f5 big-ip domain name system 14.1.4

f5 big-ip domain name system 15.1.0

f5 big-ip domain name system 16.1.0

f5 big-ip fraud protection service 14.1.4

f5 big-ip fraud protection service 15.1.0

f5 big-ip fraud protection service 16.1.0

f5 big-ip global traffic manager 14.1.4

f5 big-ip global traffic manager 15.1.0

f5 big-ip global traffic manager 16.1.0

f5 big-ip link controller 14.1.4

f5 big-ip link controller 15.1.0

f5 big-ip link controller 16.1.0

f5 big-ip local traffic manager 14.1.4

f5 big-ip local traffic manager 16.1.0

f5 big-ip policy enforcement manager 14.1.4

f5 big-ip policy enforcement manager 16.1.0

f5 big-ip analytics 11.6.2

f5 big-ip analytics 11.6.3

f5 big-ip analytics 11.6.4

f5 big-ip analytics 11.6.5

f5 big-ip analytics 12.1.3

f5 big-ip analytics 12.1.4

f5 big-ip analytics 12.1.5

f5 big-ip analytics 12.1.6

f5 big-ip analytics 13.1.1

f5 big-ip analytics 13.1.3

f5 big-ip analytics 13.1.4

f5 big-ip analytics 13.1.5

f5 big-ip analytics 14.1.2

f5 big-ip analytics 14.1.3

f5 big-ip analytics 15.1.1

f5 big-ip application acceleration manager 11.6.2

f5 big-ip application acceleration manager 11.6.3

f5 big-ip application acceleration manager 11.6.4

f5 big-ip application acceleration manager 11.6.5

f5 big-ip application acceleration manager 12.1.3

f5 big-ip application acceleration manager 12.1.4

f5 big-ip application acceleration manager 12.1.5

f5 big-ip application acceleration manager 12.1.6

f5 big-ip application acceleration manager 13.1.1

f5 big-ip application acceleration manager 13.1.3

f5 big-ip application acceleration manager 13.1.4

f5 big-ip application acceleration manager 13.1.5

f5 big-ip application acceleration manager 14.1.2

f5 big-ip application acceleration manager 14.1.3

f5 big-ip application acceleration manager 15.1.1

f5 big-ip application acceleration manager 15.1.2

f5 big-ip application acceleration manager 15.1.3

f5 big-ip application acceleration manager 15.1.4

f5 big-ip application acceleration manager 15.1.5

f5 big-ip application acceleration manager 16.1.1

f5 big-ip application acceleration manager 16.1.2

f5 big-ip application acceleration manager 17.0.0

f5 big-ip application security manager 11.6.2

f5 big-ip application security manager 11.6.3

f5 big-ip application security manager 11.6.4

f5 big-ip application security manager 11.6.5

f5 big-ip application security manager 12.1.3

f5 big-ip application security manager 12.1.4

f5 big-ip application security manager 12.1.5

f5 big-ip application security manager 12.1.6

f5 big-ip application security manager 13.1.1

f5 big-ip application security manager 13.1.3

f5 big-ip application security manager 13.1.4

f5 big-ip application security manager 13.1.5

f5 big-ip application security manager 14.1.2

f5 big-ip application security manager 14.1.3

f5 big-ip application security manager 15.1.1

f5 big-ip application security manager 15.1.2

f5 big-ip application security manager 15.1.3

f5 big-ip application security manager 15.1.4

f5 big-ip application security manager 15.1.5

f5 big-ip application security manager 16.1.1

f5 big-ip application security manager 16.1.2

f5 big-ip application security manager 17.0.0

f5 big-ip fraud protection service 12.1.6

f5 big-ip fraud protection service 13.1.1

f5 big-ip fraud protection service 13.1.3

f5 big-ip fraud protection service 13.1.4

f5 big-ip fraud protection service 13.1.5

f5 big-ip fraud protection service 14.1.2

f5 big-ip fraud protection service 14.1.3

f5 big-ip fraud protection service 15.1.1

f5 big-ip fraud protection service 15.1.2

f5 big-ip fraud protection service 15.1.3

f5 big-ip fraud protection service 15.1.4

f5 big-ip fraud protection service 15.1.5

f5 big-ip fraud protection service 16.1.1

f5 big-ip fraud protection service 16.1.2

f5 big-ip fraud protection service 17.0.0

f5 big-ip global traffic manager 11.6.2

f5 big-ip global traffic manager 11.6.3

f5 big-ip global traffic manager 11.6.4

f5 big-ip global traffic manager 11.6.5

f5 big-ip global traffic manager 12.1.3

f5 big-ip global traffic manager 12.1.4

f5 big-ip global traffic manager 12.1.5

f5 big-ip global traffic manager 12.1.6

f5 big-ip global traffic manager 13.1.1

f5 big-ip global traffic manager 13.1.3

f5 big-ip global traffic manager 13.1.4

f5 big-ip global traffic manager 13.1.5

f5 big-ip global traffic manager 14.1.2

f5 big-ip global traffic manager 14.1.3

f5 big-ip global traffic manager 15.1.1

f5 big-ip global traffic manager 15.1.2

f5 big-ip global traffic manager 15.1.3

f5 big-ip global traffic manager 15.1.4

f5 big-ip global traffic manager 15.1.5

f5 big-ip global traffic manager 16.1.1

f5 big-ip global traffic manager 16.1.2

f5 big-ip global traffic manager 17.0.0

f5 big-ip link controller 11.6.2

f5 big-ip link controller 11.6.3

f5 big-ip link controller 11.6.4

f5 big-ip link controller 11.6.5

f5 big-ip link controller 12.1.3

f5 big-ip link controller 12.1.4

f5 big-ip link controller 12.1.5

f5 big-ip link controller 12.1.6

f5 big-ip link controller 13.1.1

f5 big-ip link controller 13.1.3

f5 big-ip link controller 13.1.4

f5 big-ip link controller 13.1.5

f5 big-ip link controller 14.1.2

f5 big-ip link controller 14.1.3

f5 big-ip link controller 15.1.1

f5 big-ip link controller 15.1.2

f5 big-ip link controller 15.1.3

f5 big-ip link controller 15.1.4

f5 big-ip link controller 15.1.5

f5 big-ip link controller 16.1.1

f5 big-ip link controller 16.1.2

f5 big-ip link controller 17.0.0

f5 big-ip local traffic manager 11.6.2

f5 big-ip local traffic manager 11.6.3

f5 big-ip local traffic manager 11.6.4

f5 big-ip local traffic manager 11.6.5

f5 big-ip local traffic manager 12.1.3

f5 big-ip local traffic manager 12.1.4

f5 big-ip local traffic manager 12.1.5

f5 big-ip local traffic manager 12.1.6

f5 big-ip local traffic manager 13.1.1

f5 big-ip local traffic manager 13.1.3

f5 big-ip local traffic manager 13.1.4

f5 big-ip local traffic manager 13.1.5

f5 big-ip local traffic manager 14.1.2

f5 big-ip local traffic manager 14.1.3

f5 big-ip local traffic manager 15.1.1

f5 big-ip local traffic manager 15.1.2

f5 big-ip local traffic manager 15.1.3

f5 big-ip local traffic manager 15.1.4

f5 big-ip local traffic manager 15.1.5

f5 big-ip local traffic manager 16.1.1

f5 big-ip local traffic manager 16.1.2

f5 big-ip local traffic manager 17.0.0

f5 big-ip policy enforcement manager 11.6.3

f5 big-ip policy enforcement manager 11.6.4

f5 big-ip policy enforcement manager 11.6.5

f5 big-ip policy enforcement manager 12.1.4

f5 big-ip policy enforcement manager 12.1.5

f5 big-ip policy enforcement manager 12.1.6

f5 big-ip policy enforcement manager 13.1.1

f5 big-ip policy enforcement manager 13.1.3

f5 big-ip policy enforcement manager 13.1.4

f5 big-ip policy enforcement manager 13.1.5

f5 big-ip policy enforcement manager 14.1.2

f5 big-ip policy enforcement manager 14.1.3

f5 big-ip policy enforcement manager 15.1.1

f5 big-ip policy enforcement manager 15.1.2

f5 big-ip policy enforcement manager 15.1.3

f5 big-ip policy enforcement manager 15.1.4

f5 big-ip policy enforcement manager 15.1.5

f5 big-ip policy enforcement manager 16.1.1

f5 big-ip policy enforcement manager 16.1.2

f5 big-ip policy enforcement manager 17.0.0

f5 big-ip domain name system 11.6.2

f5 big-ip domain name system 11.6.3

f5 big-ip domain name system 11.6.4

f5 big-ip domain name system 11.6.5

f5 big-ip domain name system 12.1.3

f5 big-ip domain name system 12.1.4

f5 big-ip domain name system 12.1.5

f5 big-ip domain name system 12.1.6

f5 big-ip domain name system 13.1.1

f5 big-ip domain name system 13.1.3

f5 big-ip domain name system 13.1.4

f5 big-ip domain name system 13.1.5

f5 big-ip domain name system 14.1.2

f5 big-ip domain name system 14.1.3

f5 big-ip domain name system 15.1.1

f5 big-ip domain name system 15.1.2

f5 big-ip domain name system 15.1.3

f5 big-ip domain name system 15.1.4

f5 big-ip domain name system 15.1.5

f5 big-ip domain name system 16.1.1

f5 big-ip domain name system 16.1.2

f5 big-ip domain name system 17.0.0

f5 big-ip fraud protection service 11.6.2

f5 big-ip fraud protection service 11.6.3

f5 big-ip fraud protection service 11.6.4

f5 big-ip fraud protection service 11.6.5

f5 big-ip fraud protection service 12.1.1

f5 big-ip fraud protection service 12.1.2

f5 big-ip fraud protection service 12.1.3

f5 big-ip fraud protection service 12.1.4

f5 big-ip fraud protection service 12.1.5

References

CWE-352https://support.f5.com/csp/article/K49905324https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook