← Back

CVE-2018-15316

nvd nist
Published: Oct 19, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.

Affected (3)

F5
3 products
Big Ip Access Policy Manager
Big Ip Access Policy Manager Client
Big Ip Edge Client
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Big Ip Access Policy Manager
From 13.0.0 to 13.1.1.1
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Big Ip Access Policy Manager Client
From 7.1.5 to 7.1.6
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Big Ip Edge Client
From 7101 to 7160

References (6)

Source: f5sirt@f5.com
Third Party AdvisoryVDB Entry
Source: f5sirt@f5.com
Third Party AdvisoryVDB Entry
Source: f5sirt@f5.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.