CVE-2022-41835 HIGH

CVE-2022-41835: F5OS vulnerability CVE-2022-41835

Vendor F5
Product F5OS-A
Weakness CWE-269
Published October 19, 2022
Last update May 7, 2025
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

What the vulnerability does

01Description

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

Key dates

02Disclosure timeline

October 19, 2022 CVE published
May 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2017-20072 Hindu Matrimonial Script generalsettings.php privileges management CVE-2025-14736 Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field CVE-2026-23990 Flux Operator Web UI Impersonation Bypass via Empty OIDC Claims CVE-2024-47770 Ability to view Agent list with no privilege access in wazuh-dashboard CVE-2024-31290 WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability