.. / CVE-2022-1388

• RCE
• Nuclei
• Web

Exploit for F5 BIG-IP iControl - REST Auth Bypass RCE (CVE-2022-1388)

Description:

F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, may allow undisclosed requests to bypass iControl REST authentication.

Nuclei Template

View the template here CVE-2022-1388.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-1388.yaml

References: