F5OS vulnerability CVE-2022-41835
CVE-2022-41835

7.3HIGH

Key Information:

Vendor
F5
Status
F5os-a
F5os-c
Vendor
CVE Published:
19 October 2022

Summary

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

Affected Version(s)

F5OS-A 1.x < 1.1.0

F5OS-C 1.x < 1.5.0

References

https://support.f5.com/csp/article/K33484483

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered internally by F5.
.