big-ip_global_traffic_manager 漏洞

低危2024/01/15

Global Traffic Statistics Exposure

Global Traffic Statistics page is exposed.

CVSS—

高危CVE-2022-416222022/12/07

CVE-2022-41622

In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

big-ip_access_policy_manager big-ip_global_traffic_manager

CVSS8.8EPSS 81.3%

高危CVE-2012-14932012/07/09

CVE-2012-1493

F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.

big-ip_global_traffic_managerRCE

CVSS7.8EPSS 84.4%

big-ip_global_traffic_manager

关联漏洞

Global Traffic Statistics Exposure

CVE-2022-41622

CVE-2012-1493