Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager CVE-2022-1388

Name: Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager CVE-2022-1388
Rating: 5 (210 reviews)

2024-04-30 | CVSS 9.8

## https://sploitus.com/exploit?id=4316F74D-7FF4-5A48-9AFB-2013B85343AF
# CVE-2022-1388
A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges.

## USAGE

python3 f5bigip_scanner.py