CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
50Exploited in Wild
YesDecision
Descriptions
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
En F5 BIG-IP versiones 16.1.x anteriores a 16.1.2.2, versiones 15.1.x anteriores a 15.1.5.1, versiones 14.1.x anteriores a 14.1.4.6, versiones 13.1.x anteriores a 13.1.5 y todas las versiones 12.1.x y 11.6.x, las peticiones no reveladas pueden omitir la autenticación REST de iControl. Nota: las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no son evaluadas
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-04-19 CVE Reserved
- 2022-05-05 CVE Published
- 2022-05-05 First Exploit
- 2022-05-10 Exploited in Wild
- 2022-05-31 KEV Due Date
- 2024-09-17 CVE Updated
- 2024-10-31 EPSS Updated
CWE
- CWE-306: Missing Authentication for Critical Function
CAPEC
References (52)
URL | Tag | Source |
---|---|---|
https://www.horizon3.ai/f5-icontrol-rest-endpoint-authentication-bypass-technical-deep-dive |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://support.f5.com/csp/article/K23605346 | 2022-05-04 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Analytics" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Analytics" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Analytics" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Analytics" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Analytics" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | >= 11.6.1 <= 11.6.5 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 11.6.1 <= 11.6.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | >= 12.1.0 <= 12.1.6 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 12.1.0 <= 12.1.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | >= 13.1.0 < 13.1.5 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 13.1.0 < 13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | >= 14.1.0 < 14.1.4.6 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 14.1.0 < 14.1.4.6" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | >= 15.1.0 < 15.1.5.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 15.1.0 < 15.1.5.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager" | >= 16.1.0 < 16.1.2.2 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 16.1.0 < 16.1.2.2" | - |
Affected
|