Description
F5 BIG-IP 存在认证绕过漏洞。
F5 BIG-IP CVE-2022-1388 认证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/F5-BIG-IP-iControl-REST%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E-CVE-2022-1388.md
https://www.iotsec-zone.com/article/142
https://www.h3c.com/cn/d_202207/1644560_30003_0.htm
https://itc.jisu.edu.cn/info/1087/1329.htm
https://cvepremium.circl.lu/vuln/CVE-2022-1388
https://www.ithome.com.tw/news/150831
https://www.anquanke.com/post/id/273785
https://www.huaweicloud.com/intl/zh-cn/notice/20220505193138145.html
https://cloud.tencent.com/developer/article/2134971
https://www.cnvd.org.cn/flaw/show/CNVD-2022-35519
https://www.cc.ntu.edu.tw/chinese/epaper/home/20221220_006308.html
https://rivers.chaitin.cn/blog/cq94i210lnechd243e20
https://developer.aliyun.com/article/1100581
https://pizz33.github.io/posts/5390a18a98db/
https://my.f5.com/manage/s/article/K23605346
https://www.tenable.com/plugins/nessus/160726
https://unit42.paloaltonetworks.com/cve-2022-1388/
https://nvd.nist.gov/vuln/detail/CVE-2022-1388
https://www.sentinelone.com/vulnerability-database/cve-2022-1388/
https://www.vulncheck.com/blog/new-cve-2022-1388
https://www.greynoise.io/blog/observed-in-the-wild-f5-big-ip-cve-2022-1388
https://www.rapid7.com/blog/post/2022/05/09/active-exploitation-of-f5-big-ip-icontrol-rest-cve-2022-1388/
https://www.picussecurity.com/resource/cve-2022-1388-f5-big-ip-vulnerability-exploit
https://arcticwolf.com/resources/blog/big-ip-icontrol-rest-critical-authentication-bypass-vulnerability-cve-2022-1388/
https://research.splunk.com/network/bb1c2c30-107a-4e56-a4b9-1f7022867bfe/
https://bishopfox.com/blog/big-ip-scanner-cve-2022-1388
https://zhuanlan.zhihu.com/p/651253572
https://blog.csdn.net/2401_84519907/article/details/138955503
https://cve.imfht.com/detail/CVE-2022-1388
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-215a