Privilege Escalation in F5 BIG-IP APM Product

CVE-2022-27634

What is CVE-2022-27634?

The BIG-IP APM by F5 Networks contains a vulnerability where specific versions fail to properly validate configurations. This oversight enables an authenticated attacker with high privileges to manipulate the APM policy, potentially leading to privilege escalation or remote code execution. Users of affected versions should prioritize applying updates to mitigate the risk of exploitation.

References