Vulnerability Description
In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows could allow an attacker to load a malicious DLL library from its current directory. User interaction is required to exploit this vulnerability in that the victim must run this utility on the Windows system. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F5 | Access Policy Manager Clients | >= 7.1.5, < 7.1.8.5 |
| F5 | Big-Ip Access Policy Manager | >= 11.6.1, <= 11.6.5 |
Related Weaknesses (CWE)
References
- https://support.f5.com/csp/article/K29282483Vendor Advisory
- https://support.f5.com/csp/article/K29282483Vendor Advisory
FAQ
What is CVE-2021-22980?
CVE-2021-22980 is a vulnerability with a CVSS score of 7.8 (HIGH). In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for...
How severe is CVE-2021-22980?
CVE-2021-22980 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-22980?
Check the references section above for vendor advisories and patch information. Affected products include: F5 Access Policy Manager Clients, F5 Big-Ip Access Policy Manager.