PT-2022-22401
CVE-2022-34865
·
تاريخ النشر
2022-08-04
·
تاريخ التحديث
2022-08-10
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
BIG-IP versions 13.1.x
BIG-IP versions 14.1.x through 14.1.5
BIG-IP versions 15.1.x through 15.1.6.1
Description
The issue affects Traffic Intelligence feeds that use HTTPS, where the remote endpoint identity is not verified, potentially allowing for data poisoning.
Recommendations
For BIG-IP version 13.1.x, there is no information about a newer version that contains a fix for this issue.
For BIG-IP versions 14.1.x through 14.1.5, update to version 14.1.5 or later.
For BIG-IP versions 15.1.x through 15.1.6.1, update to version 15.1.6.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾