CVE-2022-27875

Published: May 5, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

On F5 Access for Android 3.x versions prior to 3.0.8, a Task Hijacking vulnerability exists in the F5 Access for Android application, which may allow an attacker to steal sensitive user information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected (1)

Products: F5: Access For Android

1 product

Access For Android

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
F5 Access For Android	From 3.0.6 to 3.0.8

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://support.f5.com/csp/article/K40019131

Source: f5sirt@f5.com

Vendor Advisory

https://support.f5.com/csp/article/K40019131

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.