CVE-2022-29263

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions prior to 16.1.2.2 F5 BIG-IP APM versions prior to 15.1.5.1 F5 BIG-IP APM versions prior to 14.1.4.6 F5 BIG-IP APM versions prior to 13.1.5 F5 BIG-IP APM versions 12.1.x F5 BIG-IP APM versions 11.6.x F5 BIG-IP APM Clients versions prior to 7.2.1.5

Description The BIG-IP Edge Client Component Installer Service in F5 BIG-IP APM does not follow best practices when saving temporary files.

Recommendations For F5 BIG-IP APM versions prior to 16.1.2.2, update to version 16.1.2.2 or later. For F5 BIG-IP APM versions prior to 15.1.5.1, update to version 15.1.5.1 or later. For F5 BIG-IP APM versions prior to 14.1.4.6, update to version 14.1.4.6 or later. For F5 BIG-IP APM versions prior to 13.1.5, update to version 13.1.5 or later. For F5 BIG-IP APM versions 12.1.x and 11.6.x, consider upgrading to a supported version. For F5 BIG-IP APM Clients versions prior to 7.2.1.5, update to version 7.2.1.5 or later.