PT-2022-18660 · F5 · F5 Access For Android

Published 2022-05-05 · Updated 2022-05-12 · CVE-2022-27875

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions F5 Access for Android versions prior to 3.0.8

Description A Task Hijacking issue exists in the F5 Access for Android application, which may allow an attacker to steal sensitive user information.

Recommendations For versions prior to 3.0.8, update to version 3.0.8 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-27875

Affected Products

F5 Access For Android

References · 4

• https://support.f5.com/csp/article/K40019131 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27875 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27875 · Vendor Advisory
• https://t.me/cibsecurity/42021 · Telegram Post