Authorization Bypass Vulnerability in F5 BIG-IQ Centralized Management

CVE-2022-23009

What is CVE-2022-23009?

An authorization bypass vulnerability exists in F5 BIG-IQ Centralized Management, allowing an authenticated administrative user to gain unauthorized access to other BIG-IP devices managed within the same BIG-IQ system. This could potentially lead to sensitive data exposure or misconfigurations across managed devices. Note that versions that have reached End of Technical Support (EoTS) are not evaluated for these issues.

References