CVE-2022-28859: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

CVE-2022-28859 is a security vulnerability affecting F5 BIG-IP systems, specifically versions 15.1.x prior to 15.1.5.1 and 14.1.x prior to 14.1.4.6. The vulnerability was disclosed on May 4, 2022, and involves the exposure of Net HSM partition passwords during the installation process through the nethsm-safenet-install.sh and nethsm-thales-install.sh scripts (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires network access and low privileges to exploit, requires no user interaction, and primarily impacts confidentiality. The vulnerability is classified under CWE-532 (Insertion of Sensitive Information into Log File) (NVD).

The primary impact of this vulnerability is the exposure of sensitive Net HSM partition passwords during the installation process. This exposure could potentially allow attackers with access to the installation scripts to obtain credentials necessary for accessing the HSM partition (NVD).

F5 has released fixed versions to address this vulnerability. Users should upgrade to version 15.1.5.1 or later for the 15.1.x branch, or version 14.1.4.6 or later for the 14.1.x branch. Software versions which have reached End of Technical Support (EoTS) are not evaluated (NVD).