CVE-2022-29263CWE-732

CVE-2022-29263

High · published May 5, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-05-05T21:15Z
Affected products (38)
ProductVersionsFixed in
f5/access_policy_manager_clientsall versions—
f5/access_policy_manager_clientsall versions—
f5/access_policy_manager_clientsall versions—
f5/access_policy_manager_clientsall versions—
f5/access_policy_manager_clientsall versions—
f5/access_policy_manager_clientsall versions—
f5/access_policy_manager_clientsall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
f5/big-ip_access_policy_managerall versions—
References (2)
EPSS history
Timeline
  • 05 MAY 16:43Z
    On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and…
    cvelistv5