CVE-2018-5529

Published: Jul 12, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or disrupt service.

Affected (5)

Products: F5: Big Ip Access Policy Manager, Big Ip Edge

2 products

Big Ip Access Policy Manager

Big Ip Edge

Configuration A

5 vulnerable · 2 platform

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	From 11.5.1 to 11.5.6
F5 Big Ip Access Policy Manager	From 12.1.0 to 12.1.3
F5 Big Ip Access Policy Manager	From 13.0.0 to 13.1.0
F5 Big Ip Access Policy Manager	From 7.1.5 to 7.1.6.1
F5 Big Ip Edge	From 7101 to 7150