Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager CVE-2022-1388

Name: Exploit for Missing Authentication for Critical Function in F5 Big-Ip Access Policy Manager CVE-2022-1388
Rating: 5 (137 reviews)

2022-05-09 | CVSS 7.5

## https://sploitus.com/exploit?id=EC7A045E-54CB-5327-8755-53F82B91F56D
# CVE-2022-1388
BIG-IP iControl REST vulnerability CVE-2022-1388
This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a control plane issue only.

## USAGE

```bash
1、write host(IP address) in `host.txt` 
2、python3 CVE-2022-1388.py
3、the result is written in `CVE-2022-1388.txt`
```