CVE-2022-34865
published 2022-08-04CVE-2022-34865: In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the…
PriorityP348critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.38%
30.2th percentile
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected
47 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip | >= 13.1.0 < 13.1.x* | 13.1.x* |
| f5 | big-ip | >= 14.1.x < 14.1.5 | 14.1.5 |
| f5 | big-ip | >= 15.1.x < 15.1.6.1 | 15.1.6.1 |
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | 13.1.0 – 13.1.5 | — |
| f5 | big-ip_access_policy_manager | >= 14.1.0 < 14.1.5 | 14.1.5 |
| f5 | big-ip_access_policy_manager | >= 15.1.0 < 15.1.6.1 | 15.1.6.1 |
| f5 | big-ip_advanced_firewall_manager | 13.1.0 – 13.1.5 | — |
| f5 | big-ip_advanced_firewall_manager | >= 14.1.0 < 14.1.5 | 14.1.5 |
| f5 | big-ip_advanced_firewall_manager | >= 15.1.0 < 15.1.6.1 | 15.1.6.1 |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | 13.1.0 – 13.1.5 | — |
| f5 | big-ip_analytics | >= 14.1.0 < 14.1.5 | 14.1.5 |
| f5 | big-ip_analytics | >= 15.1.0 < 15.1.6.1 | 15.1.6.1 |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_application_acceleration_manager | 13.1.0 – 13.1.5 | — |
| f5 | big-ip_application_acceleration_manager | >= 14.1.0 < 14.1.5 | 14.1.5 |
| f5 | big-ip_application_acceleration_manager | >= 15.1.0 < 15.1.6.1 | 15.1.6.1 |
| f5 | big-ip_application_security_manager | 13.1.0 – 13.1.5 | — |
| f5 | big-ip_application_security_manager | >= 14.1.0 < 14.1.5 | 14.1.5 |
| f5 | big-ip_application_security_manager | >= 15.1.0 < 15.1.6.1 | 15.1.6.1 |
| f5 | big-ip_asm | — | — |
| f5 | big-ip_dns | — | — |
| f5 | big-ip_domain_name_system | 13.1.0 – 13.1.5 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2022-34865: In BIG-IP Versions 15
vendor_f5·2022-08-04·CVSS 4.8
CVE-2022-34865 [MEDIUM] CWE-295 CVE-2022-34865: In BIG-IP Versions 15
CVE-2022-34865: In BIG-IP Versions 15
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Products: BIG-IP AAM, BIG-IP AFM, BIG-IP APM, BIG-IP ASM, BIG-IP Analytics, BIG-IP DNS, BIG-IP FPS, BIG-IP GTM, BIG-IP LTM, BIG-IP Link Controller, BIG-IP PEM
Affected Versions: 13.1.0 - 13.1.5; 14.1.0 - 14.1.5; 15.1.0 - 15.1.6.1
F5 Advisory Articles: K25046752
F5 References: https://support.f5.com/csp/article/K25046752
GHSA
GHSA-pvg2-m4mw-28jx: In BIG-IP Versions 15
ghsa_unreviewed·2022-08-05
CVE-2022-34865 [CRITICAL] CWE-295 GHSA-pvg2-m4mw-28jx: In BIG-IP Versions 15
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-08-04
Published