CVE-2017-6152 — Improper Privilege Management in F5 Big-iq Centralized Management

CWE-269 — Improper Privilege Management4 documents4 sources
Severity
6.7MEDIUMNVD
EPSS
0.1%
top 77.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
F5 Big-iq Centralized ManagementF5 Networks INC Big-iq Centralized Management
Timeline
PublishedMar 8
Latest updateMay 13

Description

A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-8jrf-3p79-h4f4: A local user on F5 BIG-IQ Centralized Management 5↗2022-05-13
▶
CVEList
CVE-2017-6152: A local user on F5 BIG-IQ Centralized Management 5↗2018-03-08
▶

📋Vendor Advisories

1
F5
CVE-2017-6152: A local user on F5 BIG-IQ Centralized Management 5↗2018-03-08
▶
CVE-2017-6152 — Improper Privilege Management in F5 | cvebase