---
id: 7358
title: "Cảnh báo chiến dịch khai thác lỗ hổng CVE-2022-1388 trên các hệ thống sử dụng F5 BIG-IP - Phần I"
cve: CVE-2022-1388
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/canh-bao-chien-dich-khai-thac-lo-hong-cve-2022-1388-tren-cac-he-thong-su-dung-f5-big-ip-phan-1/"
published_at: "2022-05-26T10:59:11Z"
tags: ["rce", "authentication-bypass", "vulnerability-analysis", "cve-2022-1388", "f5", "big-ip"]
phying_url: "https://phying.com/item/7358"
lang: en
---

# Cảnh báo chiến dịch khai thác lỗ hổng CVE-2022-1388 trên các hệ thống sử dụng F5 BIG-IP - Phần I

## Summary

Part one explains CVE-2022-1388: an auth bypass in F5 BIG-IP iControl REST (CVSS 9.8) enabling unauthenticated RCE, dissecting how Apache forwards /mgmt requests to Jetty and token validation fails.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-1388
- **Published:** 2022-05-26T10:59:11Z
- **Original:** https://blog.viettelcybersecurity.com/canh-bao-chien-dich-khai-thac-lo-hong-cve-2022-1388-tren-cac-he-thong-su-dung-f5-big-ip-phan-1/
- **Phying News:** https://phying.com/item/7358