Vulnerabilities > CVE-2023-22372 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in F5 Big-Ip Access Policy Manager

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

high complexity

CWE-924

NVD

Published: 2023-05-03

Updated: 2023-05-10

Summary

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 BIG IP Access Policy Manager 7.2.2 F5 BIG IP Access Policy Manager 7.2.4 F5 BIG IP Access Policy Manager 13.1.0 F5 BIG IP Access Policy Manager 13.1.0.1 F5 BIG IP Access Policy Manager 13.1.0.2 F5 BIG IP Access Policy Manager 13.1.0.3 F5 BIG IP Access Policy Manager 13.1.0.4 F5 BIG IP Access Policy Manager 13.1.0.5 F5 BIG IP Access Policy Manager 13.1.0.6 F5 BIG IP Access Policy Manager 13.1.0.7 F5 BIG IP Access Policy Manager 13.1.0.8 F5 BIG IP Access Policy Manager 13.1.1 F5 BIG IP Access Policy Manager 13.1.1.1 F5 BIG IP Access Policy Manager 13.1.1.2 F5 BIG IP Access Policy Manager 13.1.1.3 F5 BIG IP Access Policy Manager 13.1.1.4 F5 BIG IP Access Policy Manager 13.1.1.5 F5 BIG IP Access Policy Manager 13.1.2 F5 BIG IP Access Policy Manager 13.1.3 F5 BIG IP Access Policy Manager 13.1.3.1 F5 BIG IP Access Policy Manager 13.1.3.2 F5 BIG IP Access Policy Manager 13.1.3.3 F5 BIG IP Access Policy Manager 13.1.3.4 F5 BIG IP Access Policy Manager 13.1.3.5 F5 BIG IP Access Policy Manager 13.1.3.6 F5 BIG IP Access Policy Manager 13.1.4 F5 BIG IP Access Policy Manager 13.1.5 F5 BIG IP Access Policy Manager 14.1.0 F5 BIG IP Access Policy Manager 14.1.0.1 F5 BIG IP Access Policy Manager 14.1.0.2 F5 BIG IP Access Policy Manager 14.1.0.2.0.45.4 F5 BIG IP Access Policy Manager 14.1.0.2.0.62.4 F5 BIG IP Access Policy Manager 14.1.0.3 F5 BIG IP Access Policy Manager 14.1.0.3.0.79.6 F5 BIG IP Access Policy Manager 14.1.0.3.0.97.6 F5 BIG IP Access Policy Manager 14.1.0.3.0.99.6 F5 BIG IP Access Policy Manager 14.1.0.5 F5 BIG IP Access Policy Manager 14.1.0.5.0.15.5 F5 BIG IP Access Policy Manager 14.1.0.5.0.36.5 F5 BIG IP Access Policy Manager 14.1.0.5.0.40.5 F5 BIG IP Access Policy Manager 14.1.0.6 F5 BIG IP Access Policy Manager 14.1.0.6.0.11.9 F5 BIG IP Access Policy Manager 14.1.0.6.0.14.9 F5 BIG IP Access Policy Manager 14.1.0.6.0.68.9 F5 BIG IP Access Policy Manager 14.1.0.6.0.70.9 F5 BIG IP Access Policy Manager 14.1.2 F5 BIG IP Access Policy Manager 14.1.2-0.0.37 F5 BIG IP Access Policy Manager 14.1.2-0.89.37 F5 BIG IP Access Policy Manager 14.1.2.0.11.37 F5 BIG IP Access Policy Manager 14.1.2.0.18.37 F5 BIG IP Access Policy Manager 14.1.2.0.32.37 F5 BIG IP Access Policy Manager 14.1.2.1 F5 BIG IP Access Policy Manager 14.1.2.1-0.0.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.14.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.16.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.34.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.46.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.83.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.97.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.99.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.105.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.111.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.115.4 F5 BIG IP Access Policy Manager 14.1.2.1.0.122.4 F5 BIG IP Access Policy Manager 14.1.2.2 F5 BIG IP Access Policy Manager 14.1.2.2-0.0.4 F5 BIG IP Access Policy Manager 14.1.2.3 F5 BIG IP Access Policy Manager 14.1.2.3-0.0.5 F5 BIG IP Access Policy Manager 14.1.2.4 F5 BIG IP Access Policy Manager 14.1.2.5 F5 BIG IP Access Policy Manager 14.1.2.5-0.0.3 F5 BIG IP Access Policy Manager 14.1.2.6 F5 BIG IP Access Policy Manager 14.1.2.6-0.0.2 F5 BIG IP Access Policy Manager 14.1.2.7 F5 BIG IP Access Policy Manager 14.1.2.7-0.0.5 F5 BIG IP Access Policy Manager 14.1.2.8 F5 BIG IP Access Policy Manager 14.1.3 F5 BIG IP Access Policy Manager 14.1.3.1 F5 BIG IP Access Policy Manager 14.1.4 F5 BIG IP Access Policy Manager 14.1.4.4 F5 BIG IP Access Policy Manager 14.1.4.6 F5 BIG IP Access Policy Manager 14.1.5 F5 BIG IP Access Policy Manager 15.1.0 F5 BIG IP Access Policy Manager 15.1.0.1 F5 BIG IP Access Policy Manager 15.1.0.2 F5 BIG IP Access Policy Manager 15.1.0.3 F5 BIG IP Access Policy Manager 15.1.0.4 F5 BIG IP Access Policy Manager 15.1.0.5 F5 BIG IP Access Policy Manager 15.1.1 F5 BIG IP Access Policy Manager 15.1.2 F5 BIG IP Access Policy Manager 15.1.2.1 F5 BIG IP Access Policy Manager 15.1.3 F5 BIG IP Access Policy Manager 15.1.4 F5 BIG IP Access Policy Manager 15.1.4.1 F5 BIG IP Access Policy Manager 15.1.5 F5 BIG IP Access Policy Manager 15.1.5.1 F5 BIG IP Access Policy Manager 15.1.7 F5 BIG IP Access Policy Manager 15.1.8 F5 BIG IP Access Policy Manager 16.1.0 F5 BIG IP Access Policy Manager 16.1.1 F5 BIG IP Access Policy Manager 16.1.2 F5 BIG IP Access Policy Manager 16.1.2.2 F5 BIG IP Access Policy Manager 16.1.3 F5 BIG IP Access Policy Manager 17.0.0 F5 BIG IP Access Policy Manager 17.0.0.2 F5 BIG IP Access Policy Manager 17.1.0	106
OS	Apple Apple Macos -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-924 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel

References

https://my.f5.com/manage/s/article/K000132522