The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K15101402 advisory.

    An authenticated iControl REST user with at least guest role privileges can cause processing delays to     iControl REST requests via undisclosed requests.(CVE-2022-1468)ImpactProcessing delays to iControl REST     requests can occur until the iControl REST daemon is either forced to restart or manually restarted. This     vulnerability allows a remote authenticated attacker to cause a degradation of service that can lead to a     denial-of-service (DoS) on the iControl REST daemon.There is no data plane exposure; this is a control     plane issue only.

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

F5 Networks BIG-IP : iControl REST vulnerability (K15101402)

medium Nessus Plugin ID 160679

Version 1.8