CVE-2015-8022: The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2....

Security readout for executives and security teams

This is a privilege escalation issue in the F5 BIG-IP web Configuration utility. An already authenticated user with certain permissions could gain higher privileges through an Access Policy Manager customization area that permits file uploads. It affects multiple BIG-IP 11.x product modules before named hotfix or maintenance releases. Exposure is most likely on legacy BIG-IP 11.x systems where the management Configuration utility is reachable and lower-privileged authenticated users have relevant customization permissions. Internet-exposed or broadly accessible management interfaces increase business risk. Prioritize remediation for any exposed or shared-administration BIG-IP 11.x environment. The issue requires authentication, but successful privilege escalation on an application delivery or security gateway can undermine traffic control, access policy, and operational trust. Mitigation focus: Identify all BIG-IP 11.x appliances and enabled modules.; Upgrade affected branches to the fixed F5 releases named in the advisory.; Restrict Configuration utility access to trusted management networks..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.