Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2022-41983

BIG-IP TMM Vulnerability CVE-2022-41983

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even with an SSL Profile applied.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • 17.0.0 to < 17.0.x*unaffected
  • 16.1.x to < 16.1.3.1affected
  • 15.1.x to < 15.1.7affected
  • 14.1.x to < 14.1.5.1affected
  • 13.1.0 to < 13.1.x*affected

References