Skip to content
OpenAdvisories
High · 7.3 CVE-2022-41835 EUVD-2022-45002GHSA-29qx-4rqj-787m

F5OS vulnerability CVE-2022-41835

Published Oct 19, 2022 · Updated May 7, 2025 · Assigned by f5

Description

In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

Affected products

VendorProductAffectedFixed
F5 F5OS-A 1.x – < 1.1.0 1.1.0
F5 F5OS-C 1.x – < 1.5.0 1.5.0

References