important · Edge
Any authenticated BIG-IP or BIG-IQ management role can create an administrator.
Affects
F5 BIG-IP application-delivery and security appliances and BIG-IQ centralized management systems through their management interfaces.
An undisclosed TMUI request fails to enforce the caller's role, allowing even the lowest authenticated management role to mint a persistent administrator identity.
Detail and 2 sources
F5 published fixed versions, and no public exploit was identified by the cutoff.