{"id":19631,"date":"2022-05-11T08:23:00","date_gmt":"2022-05-11T08:23:00","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=19631"},"modified":"2026-04-17T18:07:44","modified_gmt":"2026-04-17T18:07:44","slug":"f5-big-ip-icontrol-rest-authentication-bypass-vulnerability-cve-2022-1388-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/f5-big-ip-icontrol-rest-authentication-bypass-vulnerability-cve-2022-1388-alert\/","title":{"rendered":"F5 BIG-IP iControl REST Authentication Bypass Vulnerability (CVE-2022-1388) Alert"},"content":{"rendered":"\n

Overview<\/h2>\n\n\n\n

Recently, NSFOCUS CERT detected that F5 issued a security bulletin to fix an authentication bypass vulnerability in BIG-IP. Unauthenticated attackers can use the control interface to exploit, through the BIG-IP management interface or its own IP address. Network access to the iControl REST interface to execute arbitrary system commands, create or delete files, and disable services. The CVSS score is 9.8, and details have been disclosed so far, and relevant users are requested to take measures to protect them as soon as possible.<\/p>\n\n\n\n

F5 BIG-IP is an application delivery platform of F5 Company in the United States that integrates network traffic management, application security management, load balancing and other functions. Users can have lightweight and fast interaction with F5 devices through iControl REST.<\/p>\n\n\n\n

Reference link: https:\/\/support.f5.com\/csp\/article\/K23605346<\/a><\/p>\n\n\n\n

Scope of Impact<\/h2>\n\n\n\n

Affected version<\/p>\n\n\n\n