ATI Update ATI-2022-11

Note: This is a special ATI release to address the recent F5 BIG-IP vulnerability tracked with CVE-2022-1388.

New Strikes (1)

CVSS ID References Category Info
7.5 E22-1ex81 CVE-2022-1388CVSSCVSSv3CWE-306URL Exploits This strike exploits an authentication bypass vulnerability in F5 BIG-IP product. The vulnerability is due to improper handling of requests sent to management port. A remote, unauthenticated attacker could exploit this by sending a maliciously crafted request to the management port. A successful attack may result in remote code execution in the security context of ROOT.