cnvd - cnvd-2022-55188

cnvd-2022-55188

Vulnerability from cnvd

Title: F5 BIG-IP iControl REST不当权限管理漏洞

Description:

F5 BIG-IP是F5公司的一款集成了网络流量编排、负载均衡、智能DNS，远程接入策略管理等功能的应用交付平台。

F5 BIG-IP iControl REST存在不当权限管理漏洞，BIG-IP在设备模式下运行时，具有管理员身份的经过验证的攻击者可利用该漏洞能够使用未公开的iControl REST端点绕过设备模式限制，跨越安全边界。

Severity: 高

Patch Name: F5 BIG-IP iControl REST不当权限管理漏洞的补丁

Patch Description:

F5 BIG-IP是F5公司的一款集成了网络流量编排、负载均衡、智能DNS，远程接入策略管理等功能的应用交付平台。

F5 BIG-IP iControl REST存在不当权限管理漏洞，BIG-IP在设备模式下运行时，具有管理员身份的经过验证的攻击者可利用该漏洞能够使用未公开的iControl REST端点绕过设备模式限制，跨越安全边界。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://support.f5.com/csp/article/K11010341

Reference: https://support.f5.com/csp/article/K11010341

Impacted products

Name
['F5 BIG-IP (all modules) >=13.1.0，<=13.1.5', 'F5 BIG-IP (all modules) >=14.1.0，<=14.1.4', 'F5 BIG-IP (all modules) >=15.1.0，<=15.1.5', 'F5 BIG-IP (all modules) >=16.1.0，<=16.1.2']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-35243",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-35243"
    }
  },
  "description": "F5 BIG-IP\u662fF5\u516c\u53f8\u7684\u4e00\u6b3e\u96c6\u6210\u4e86\u7f51\u7edc\u6d41\u91cf\u7f16\u6392\u3001\u8d1f\u8f7d\u5747\u8861\u3001\u667a\u80fdDNS\uff0c\u8fdc\u7a0b\u63a5\u5165\u7b56\u7565\u7ba1\u7406\u7b49\u529f\u80fd\u7684\u5e94\u7528\u4ea4\u4ed8\u5e73\u53f0\u3002\n\nF5 BIG-IP iControl REST\u5b58\u5728\u4e0d\u5f53\u6743\u9650\u7ba1\u7406\u6f0f\u6d1e\uff0cBIG-IP\u5728\u8bbe\u5907\u6a21\u5f0f\u4e0b\u8fd0\u884c\u65f6\uff0c\u5177\u6709\u7ba1\u7406\u5458\u8eab\u4efd\u7684\u7ecf\u8fc7\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u80fd\u591f\u4f7f\u7528\u672a\u516c\u5f00\u7684iControl REST\u7aef\u70b9\u7ed5\u8fc7\u8bbe\u5907\u6a21\u5f0f\u9650\u5236\uff0c\u8de8\u8d8a\u5b89\u5168\u8fb9\u754c\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.f5.com/csp/article/K11010341",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-55188",
  "openTime": "2022-08-04",
  "patchDescription": "F5 BIG-IP\u662fF5\u516c\u53f8\u7684\u4e00\u6b3e\u96c6\u6210\u4e86\u7f51\u7edc\u6d41\u91cf\u7f16\u6392\u3001\u8d1f\u8f7d\u5747\u8861\u3001\u667a\u80fdDNS\uff0c\u8fdc\u7a0b\u63a5\u5165\u7b56\u7565\u7ba1\u7406\u7b49\u529f\u80fd\u7684\u5e94\u7528\u4ea4\u4ed8\u5e73\u53f0\u3002\r\n\r\nF5 BIG-IP iControl REST\u5b58\u5728\u4e0d\u5f53\u6743\u9650\u7ba1\u7406\u6f0f\u6d1e\uff0cBIG-IP\u5728\u8bbe\u5907\u6a21\u5f0f\u4e0b\u8fd0\u884c\u65f6\uff0c\u5177\u6709\u7ba1\u7406\u5458\u8eab\u4efd\u7684\u7ecf\u8fc7\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u80fd\u591f\u4f7f\u7528\u672a\u516c\u5f00\u7684iControl REST\u7aef\u70b9\u7ed5\u8fc7\u8bbe\u5907\u6a21\u5f0f\u9650\u5236\uff0c\u8de8\u8d8a\u5b89\u5168\u8fb9\u754c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "F5 BIG-IP iControl REST\u4e0d\u5f53\u6743\u9650\u7ba1\u7406\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "F5 BIG-IP (all modules) \u003e=13.1.0\uff0c\u003c=13.1.5",
      "F5 BIG-IP (all modules) \u003e=14.1.0\uff0c\u003c=14.1.4",
      "F5 BIG-IP (all modules) \u003e=15.1.0\uff0c\u003c=15.1.5",
      "F5 BIG-IP (all modules) \u003e=16.1.0\uff0c\u003c=16.1.2"
    ]
  },
  "referenceLink": "https://support.f5.com/csp/article/K11010341",
  "serverity": "\u9ad8",
  "submitTime": "2022-08-03",
  "title": "F5 BIG-IP iControl REST\u4e0d\u5f53\u6743\u9650\u7ba1\u7406\u6f0f\u6d1e"
}

CVE-2022-35243 (GCVE-0-2022-35243)

Vulnerability from cvelistv5

Published

2022-08-04 17:49

Modified

2024-09-16 22:15

Severity ?

8.7 (High) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE

CWE-269 - Improper Privilege Management

Summary

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

▼	URL	Tags
	https://support.f5.com/csp/article/K11010341	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	F5	BIG-IP	Version: 13.1.0 < 13.1.x* Version: 14.1.x < 14.1.5 Version: 15.1.x < 15.1.5.1 Version: 16.1.x < 16.1.3 Patch: 17.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:29:17.511Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K11010341"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIG-IP",
          "vendor": "F5",
          "versions": [
            {
              "lessThan": "13.1.x*",
              "status": "affected",
              "version": "13.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.1.5",
              "status": "affected",
              "version": "14.1.x",
              "versionType": "custom"
            },
            {
              "lessThan": "15.1.5.1",
              "status": "affected",
              "version": "15.1.x",
              "versionType": "custom"
            },
            {
              "lessThan": "16.1.3",
              "status": "affected",
              "version": "16.1.x",
              "versionType": "custom"
            },
            {
              "lessThan": "17.0.x*",
              "status": "unaffected",
              "version": "17.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2022-08-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-04T17:49:19",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.f5.com/csp/article/K11010341"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "f5sirt@f5.com",
          "DATE_PUBLIC": "2022-08-03T14:00:00.000Z",
          "ID": "CVE-2022-35243",
          "STATE": "PUBLIC",
          "TITLE": "Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BIG-IP",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003e=",
                            "version_name": "13.1.x",
                            "version_value": "13.1.0"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "14.1.x",
                            "version_value": "14.1.5"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "15.1.x",
                            "version_value": "15.1.5.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "16.1.x",
                            "version_value": "16.1.3"
                          },
                          {
                            "version_affected": "!\u003e=",
                            "version_name": "17.0.x",
                            "version_value": "17.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "F5"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-269 Improper Privilege Management"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.f5.com/csp/article/K11010341",
              "refsource": "MISC",
              "url": "https://support.f5.com/csp/article/K11010341"
            }
          ]
        },
        "source": {
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2022-35243",
    "datePublished": "2022-08-04T17:49:19.345871Z",
    "dateReserved": "2022-07-19T00:00:00",
    "dateUpdated": "2024-09-16T22:15:58.079Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted