CVE-2022-41780
published 2022-10-19CVE-2022-41780: In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI…
PriorityP427medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.53%
41.1th percentile
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | f5os | — | — |
| f5 | f5os-a | — | — |
| f5 | f5os-a | >= 1.0.0 < 1.1.0 | 1.1.0 |
| f5 | f5os-a | >= 1.x < 1.1.0 | 1.1.0 |
| f5 | f5os-c | < 1.4.0 | 1.4.0 |
| f5 | f5os-c | — | — |
| f5 | f5os-c | >= 1.x < 1.4.0 | 1.4.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fqrv-f4vq-33v4: In F5OS-A version 1
ghsa_unreviewed·2022-10-20
CVE-2022-41780 [MEDIUM] CWE-22 GHSA-fqrv-f4vq-33v4: In F5OS-A version 1
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.
F5
CVE-2022-41780: In F5OS-A version 1
vendor_f5·2022-10-19·CVSS 5.5
CVE-2022-41780 [MEDIUM] CWE-22 CVE-2022-41780: In F5OS-A version 1
CVE-2022-41780: In F5OS-A version 1
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.
Affected Products: F5OS, F5OS-A, F5OS-C
Affected Versions: 1.0.0 - 1.1.0; 1.1.0 - 1.4.0
F5 Advisory Articles: K81701735
F5 References: https://support.f5.com/csp/article/K81701735
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-19
Published