CVE-2022-41835CWE-269

F5OS vulnerability CVE-2022-41835

High · published October 19, 2022

CVSS v3.1
7.3
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-10-19T21:24Z
EPSS history
Timeline
  • 19 OCT 21:24Z
    F5OS vulnerability CVE-2022-41835
    cvelistv5