// For flags

CVE-2022-26890

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Session Awareness, and the "Use APM Username and Session ID" option is enabled, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

En F5 BIG-IP Advanced WAF, ASM y APM versiones 16.1.x anteriores a 16.1.2.1, 15.1.x anteriores a 15.1.5, 14.1.x anteriores a 14.1.4.6 y 13.1.x anteriores a 13.1. 5, cuando ASM o Advanced WAF, así como APM, están configurados en un servidor virtual, la política de ASM está configurada con Session Awareness, y la opción "Use APM Username and Session ID" está habilitada, las peticiones no reveladas pueden causar la finalización del proceso bd. Nota: Las versiones de software que han alcanzado el Fin del Soporte Técnico (EoTS) no son evaluadas

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-04-19 CVE Reserved
  • 2022-05-05 CVE Published
  • 2023-11-26 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-670: Always-Incorrect Control Flow Implementation
CAPEC
References (1)
URL Tag Source
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
13.1.0
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
13.1.1
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
13.1.3
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
13.1.4
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
13.1.5
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "13.1.5"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
14.1.0
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
14.1.2
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
14.1.3
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
14.1.4
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "14.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
15.1.0
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
15.1.1
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
15.1.2
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
15.1.3
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
15.1.4
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
15.1.5
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.1.5"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
16.1.0
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
16.1.1
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Access Policy Manager
Search vendor "F5" for product "Big-ip Access Policy Manager"
16.1.2
Search vendor "F5" for product "Big-ip Access Policy Manager" and version "16.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
13.1.0
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
13.1.1
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
13.1.3
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
13.1.4
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
13.1.5
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "13.1.5"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
14.1.0
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
14.1.2
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
14.1.3
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
14.1.4
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "14.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
15.1.0
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
15.1.1
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
15.1.2
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
15.1.3
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
15.1.4
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
15.1.5
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "15.1.5"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
16.1.0
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
16.1.1
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Advanced Web Application Firewall
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall"
16.1.2
Search vendor "F5" for product "Big-ip Advanced Web Application Firewall" and version "16.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
13.1.0
Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
13.1.1
Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
13.1.3
Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
13.1.4
Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
13.1.5
Search vendor "F5" for product "Big-ip Application Security Manager" and version "13.1.5"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
14.1.0
Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
14.1.2
Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
14.1.3
Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
14.1.4
Search vendor "F5" for product "Big-ip Application Security Manager" and version "14.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
15.1.0
Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
15.1.1
Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
15.1.2
Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.2"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
15.1.3
Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.3"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
15.1.4
Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.4"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
15.1.5
Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.1.5"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
16.1.0
Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.0"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
16.1.1
Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.1"
-
Affected
F5
Search vendor "F5"
Big-ip Application Security Manager
Search vendor "F5" for product "Big-ip Application Security Manager"
16.1.2
Search vendor "F5" for product "Big-ip Application Security Manager" and version "16.1.2"
-
Affected