4
CVSSv2

CVE-2022-28859

Published: 05/05/2022 Updated: 13/05/2022
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

On F5 BIG-IP 15.1.x versions before 15.1.5.1 and 14.1.x versions before 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 big-ip access policy manager 14.1.0

f5 big-ip advanced firewall manager 14.1.0

f5 big-ip application acceleration manager 14.1.0

f5 big-ip link controller 14.1.0

f5 big-ip policy enforcement manager 14.1.0

f5 big-ip local traffic manager 14.1.0

f5 big-ip analytics 14.1.0

f5 big-ip application security manager 14.1.0

f5 big-ip domain name system 14.1.0

f5 big-ip global traffic manager 14.1.0

f5 big-ip access policy manager 14.1.4

f5 big-ip access policy manager 15.1.0

f5 big-ip advanced firewall manager 14.1.4

f5 big-ip advanced firewall manager 15.1.0

f5 big-ip analytics 14.1.4

f5 big-ip analytics 15.1.0

f5 big-ip application acceleration manager 14.1.4

f5 big-ip application acceleration manager 15.1.0

f5 big-ip application security manager 14.1.4

f5 big-ip application security manager 15.1.0

f5 big-ip domain name system 14.1.4

f5 big-ip domain name system 15.1.0

f5 big-ip fraud protection service 14.1.0

f5 big-ip fraud protection service 14.1.4

f5 big-ip fraud protection service 15.1.0

f5 big-ip global traffic manager 15.1.0

f5 big-ip link controller 15.1.0

f5 big-ip local traffic manager 14.1.4

f5 big-ip local traffic manager 15.1.0

f5 big-ip policy enforcement manager 15.1.0

f5 big-ip access policy manager 14.1.2

f5 big-ip access policy manager 14.1.3

f5 big-ip access policy manager 15.1.1

f5 big-ip access policy manager 15.1.2

f5 big-ip access policy manager 15.1.3

f5 big-ip access policy manager 15.1.4

f5 big-ip access policy manager 15.1.5

f5 big-ip access policy manager 16.1.0

f5 big-ip access policy manager 16.1.1

f5 big-ip access policy manager 16.1.2

f5 big-ip advanced firewall manager 14.1.2

f5 big-ip advanced firewall manager 14.1.3

f5 big-ip advanced firewall manager 15.1.1

f5 big-ip advanced firewall manager 15.1.2

f5 big-ip advanced firewall manager 15.1.3

f5 big-ip advanced firewall manager 15.1.4

f5 big-ip advanced firewall manager 15.1.5

f5 big-ip advanced firewall manager 16.1.0

f5 big-ip advanced firewall manager 16.1.1

f5 big-ip advanced firewall manager 16.1.2

f5 big-ip analytics 14.1.3

f5 big-ip analytics 15.1.1

f5 big-ip analytics 15.1.2

f5 big-ip analytics 15.1.3

f5 big-ip analytics 15.1.4

f5 big-ip analytics 15.1.5

f5 big-ip analytics 16.1.0

f5 big-ip analytics 16.1.1

f5 big-ip analytics 16.1.2

f5 big-ip application acceleration manager 16.1.0

f5 big-ip application security manager 16.1.0

f5 big-ip domain name system 16.1.0

f5 big-ip fraud protection service 16.1.0

f5 big-ip global traffic manager 14.1.4

f5 big-ip global traffic manager 16.1.0

f5 big-ip link controller 14.1.4

f5 big-ip link controller 16.1.0

f5 big-ip local traffic manager 16.1.0

f5 big-ip policy enforcement manager 14.1.4

f5 big-ip policy enforcement manager 16.1.0

f5 big-ip analytics 14.1.2

f5 big-ip application acceleration manager 14.1.2

f5 big-ip application acceleration manager 14.1.3

f5 big-ip application acceleration manager 15.1.1

f5 big-ip application acceleration manager 15.1.2

f5 big-ip application acceleration manager 15.1.3

f5 big-ip application acceleration manager 15.1.4

f5 big-ip application acceleration manager 15.1.5

f5 big-ip application acceleration manager 16.1.1

f5 big-ip application acceleration manager 16.1.2

f5 big-ip application security manager 14.1.2

f5 big-ip application security manager 14.1.3

f5 big-ip application security manager 15.1.1

f5 big-ip application security manager 15.1.2

f5 big-ip application security manager 15.1.3

f5 big-ip application security manager 15.1.4

f5 big-ip application security manager 15.1.5

f5 big-ip application security manager 16.1.1

f5 big-ip application security manager 16.1.2

f5 big-ip domain name system 14.1.2

f5 big-ip domain name system 14.1.3

f5 big-ip domain name system 15.1.1

f5 big-ip domain name system 15.1.2

f5 big-ip domain name system 15.1.3

f5 big-ip domain name system 15.1.4

f5 big-ip domain name system 15.1.5

f5 big-ip domain name system 16.1.1

f5 big-ip domain name system 16.1.2

f5 big-ip fraud protection service 14.1.2

f5 big-ip fraud protection service 14.1.3

f5 big-ip fraud protection service 15.1.1

f5 big-ip fraud protection service 15.1.2

f5 big-ip fraud protection service 15.1.3

f5 big-ip fraud protection service 15.1.4

f5 big-ip fraud protection service 15.1.5

f5 big-ip fraud protection service 16.1.1

f5 big-ip fraud protection service 16.1.2

f5 big-ip global traffic manager 14.1.2

f5 big-ip global traffic manager 14.1.3

f5 big-ip global traffic manager 15.1.1

f5 big-ip global traffic manager 15.1.2

f5 big-ip global traffic manager 15.1.3

f5 big-ip global traffic manager 15.1.4

f5 big-ip global traffic manager 15.1.5

f5 big-ip global traffic manager 16.1.1

f5 big-ip global traffic manager 16.1.2

f5 big-ip link controller 14.1.2

f5 big-ip link controller 14.1.3

f5 big-ip link controller 15.1.1

f5 big-ip link controller 15.1.2

f5 big-ip link controller 15.1.3

f5 big-ip link controller 15.1.4

f5 big-ip link controller 15.1.5

f5 big-ip link controller 16.1.1

f5 big-ip link controller 16.1.2

f5 big-ip local traffic manager 14.1.2

f5 big-ip local traffic manager 14.1.3

f5 big-ip local traffic manager 15.1.1

f5 big-ip local traffic manager 15.1.2

f5 big-ip local traffic manager 15.1.3

f5 big-ip local traffic manager 15.1.4

f5 big-ip local traffic manager 15.1.5

f5 big-ip local traffic manager 16.1.1

f5 big-ip local traffic manager 16.1.2

f5 big-ip policy enforcement manager 14.1.2

f5 big-ip policy enforcement manager 14.1.3

f5 big-ip policy enforcement manager 15.1.1

f5 big-ip policy enforcement manager 15.1.2

f5 big-ip policy enforcement manager 15.1.3

f5 big-ip policy enforcement manager 15.1.4

f5 big-ip policy enforcement manager 15.1.5

f5 big-ip policy enforcement manager 16.1.1

f5 big-ip policy enforcement manager 16.1.2