March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2022-42898 – Samba Vulnerability
November 17, 2022
Rewterz Threat Advisory – Jenkins Cluster Statistics Plugin Vulnerabilities
November 17, 2022
Rewterz Threat Advisory – CVE-2022-42898 – Samba Vulnerability
November 17, 2022
Rewterz Threat Advisory – Jenkins Cluster Statistics Plugin Vulnerabilities
November 17, 2022
Severity
High
Analysis Summary
CVE-2022-41622
F5 BIG-IP and BIG-IQ is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to perform unauthorized actions. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2022-41622
Affected Vendors
F5
Affected Products
- F5 BIG-IP 13.1.0
- F5 BIG-IP 14.1.0
- F5 BIG-IP 15.1.0
- F5 BIG-IQ Centralized Management 7.1.0
- F5 BIG-IQ Centralized Management 8.0.0
- F5 BIG-IP 16.1.0
- F5 BIG-IP 13.1.5
- F5 BIG-IP 17.0.0
- F5 BIG-IP 16.1.3
- F5 BIG-IP 14.1.5
- F5 BIG-IQ Centralized Management 8.2.0
- F5 BIG-IP 15.1.8
Remediation
Refer to F5 Security Advisory for patch, upgrade or suggested workaround information.