PT-2022-19265

CVE-2022-28859

·

Published

2022-05-05

·

Updated

2022-05-13

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 15.1.5.1 F5 BIG-IP versions prior to 14.1.4.6
Description The issue occurs when installing Net HSM on F5 BIG-IP. The scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password.
Recommendations For versions prior to 15.1.5.1, update to version 15.1.5.1 or later. For versions prior to 14.1.4.6, update to version 14.1.4.6 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-532: Insertion of Sensitive Information into Log File
Related identifiers
CVE-2022-28859
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com