Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iControl REST vulnerability CVE-2022-35728
Vulnerability Description
In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited time after logging out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
不充分的会话过期机制
Vulnerability Title
F5 BIG-IP 代码问题漏洞
Vulnerability Description
F5 BIG-IP是美国F5公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。 F5 BIG-IP存在代码问题漏洞，该漏洞源于已认证用户的iControl REST令牌在从配置工具中注销后可能在有限的时间内保持有效。以下产品及版本受到影响：BIG-IP 17.0.0版本、16.1.0至16.1.3版本、15.1.0至15.1.6版本、14.1.0至14.1.5版本、13.1.0至13.1.5版本。
CVSS Information
N/A
Vulnerability Type
N/A