Vulnerabilities > CVE-2022-35241 - Unspecified vulnerability in F5 Nginx Instance Manager

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2022-08-04

Updated: 2024-11-21

Summary

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 Nginx Instance Manager 2.0.0 F5 Nginx Instance Manager 2.0.1 F5 Nginx Instance Manager 2.1.0 F5 Nginx Instance Manager 2.2.0 F5 Nginx Instance Manager 2.3.0 F5 Nginx Instance Manager 1.0.0 F5 Nginx Instance Manager 1.0.1 F5 Nginx Instance Manager 1.0.2 F5 Nginx Instance Manager 1.0.3 F5 Nginx Instance Manager 1.0.4	10

References

https://support.f5.com/csp/article/K37080719
https://support.f5.com/csp/article/K37080719