CVE-2018-15334

Published: Dec 28, 2018Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication.

Affected (4)

Products: F5: Big Ip Access Policy Manager

1 product

Big Ip Access Policy Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	From 11.5.1 to 11.6.3
F5 Big Ip Access Policy Manager	From 12.1.0 to 12.1.3
F5 Big Ip Access Policy Manager	From 13.0.0 to 13.1.1
F5 Big Ip Access Policy Manager	From 14.0.0 to 14.1.0