漏洞描述
F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, may allow undisclosed requests to bypass iControl REST authentication.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
twitter.comhttps://twitter.com/GossiTheDog/status/1523566937414193153↗www.horizon3.aihttps://www.horizon3.ai/f5-icontrol-rest-endpoint-authentication-bypass-technical-deep-dive/↗support.f5.comhttps://support.f5.com/csp/article/K23605346↗cve.mitre.orghttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1388↗www.secpod.comhttps://www.secpod.com/blog/critical-f5-big-ip-remote-code-execution-vulnerability-patch-now/↗