CVE-2022-26890
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Session Awareness, and the "Use APM Username and Session ID" option is enabled, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
En F5 BIG-IP Advanced WAF, ASM y APM versiones 16.1.x anteriores a 16.1.2.1, 15.1.x anteriores a 15.1.5, 14.1.x anteriores a 14.1.4.6 y 13.1.x anteriores a 13.1. 5, cuando ASM o Advanced WAF, así como APM, están configurados en un servidor virtual, la política de ASM está configurada con Session Awareness, y la opción "Use APM Username and Session ID" está habilitada, las peticiones no reveladas pueden causar la finalización del proceso bd. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no son evaluadas
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-04-19 CVE Reserved
- 2022-05-05 CVE Published
- 2023-11-26 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-670: Always-Incorrect Control Flow Implementation
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://support.f5.com/csp/article/K03442392 | 2022-05-13 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.3 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 13.1.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.3 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 14.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.3 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 15.1.5 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 16.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 16.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager" | 16.1.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.1 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.3 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.4 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 13.1.5 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.2 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.3 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 14.1.4 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.1 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.2 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.3 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.4 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 15.1.5 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 16.1.0 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 16.1.1 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Advanced Web Application Firewall Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" | 16.1.2 Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.3 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 13.1.5 Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.3 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 14.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.2" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.3 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.3" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.4" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 15.1.5 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.5" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 16.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.0" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 16.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.1" | - |
Affected
| ||||||
F5 Search vendor "F5" | Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager" | 16.1.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.2" | - |
Affected
|