MEDIUM
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system
Published May 5, 2022
4.3
MEDIUMCVSS 3.1
EPSS 1.57%
Description
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected products
-
- Version 11.6.xStatusaffectedConstraints-
- Version 12.1.xStatusaffectedConstraints-
- Version 13.1.xStatusaffectedConstraints<13.1.5
- Version 14.1.xStatusaffectedConstraints<14.1.4.6
- Version 15.1.xStatusaffectedConstraints<15.1.5.1
- Version 16.1.xStatusaffectedConstraints<16.1.2.2
- Version 17.0.0StatusunaffectedConstraints<17.0.x*
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
OR
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
- 11.6.1
- 11.6.2
- 11.6.3
- 11.6.4
- 11.6.5
- 12.1.0
- 12.1.1
- 12.1.2
- 12.1.3
- 12.1.4
- 12.1.5
- 12.1.6
- 13.1.0
- 13.1.1
- 13.1.3
- 13.1.4
- 13.1.5
- 14.1.0
- 14.1.2
- 14.1.3
- 14.1.4
- 15.1.0
- 15.1.1
- 15.1.2
- 15.1.3
- 15.1.4
- 15.1.5
- 16.1.0
- 16.1.1
- 16.1.2
- 17.0.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (1)
- https://support.f5.com/csp/article/K59904248 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.f5.com/csp/article/K59904248 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner f5
Published May 5, 2022
Updated Sep 17, 2024
Reserved Apr 19, 2022
Link CVE-2022-29474
CISA Vulnrichment
Updated n/a