high7.8
CVE-2021-22980
In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM…
Impact
In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows could allow an attacker to load a malicious DLL library from its current directory. User interaction is required to exploit this vulnerability in that the victim must run this utility on the Windows system. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Access Policy Manager Clients | from 7.1.5 before 7.1.8.5 from 7.1.9 before 7.1.9.8 from 7.2.1 before 7.2.1.1 |
| F5 | Big-Ip Access Policy Manager | from 11.6.1 through 11.6.5 from 12.1.0 through 12.1.5 from 13.1.0 before 13.1.3.6 from 14.1.0 through 14.1.3 from 15.1.0 through 15.1.2 from 16.0.0 before 16.0.1.1 |