K08503505 : BIG-IP Edge Client for Windows vulnerability CVE-2021-23022

Security Advisory Description

The BIG-IP Edge Client Windows Installer Service’s temporary folder has weak file and folder permissions. (CVE-2021-23022)

Impact

This vulnerability can be exploited to allow an unprivileged user to run a specially crafted application to gain privilege escalation on the client Windows system. Customers are advised to update to a fixed version of the Edge Client software as listed in the security advisory.