CVE-2018-5529 — Networks INC Big-ip APM Client FOR Linux AND MAC OSX vulnerability

3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 54.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
F5 Big-ip Access Policy ManagerF5 Big-ip EdgeF5 Networks INC Big-ip APM Client FOR Linux AND MAC OSX+1 more
Timeline
PublishedJul 12
Latest updateMay 13

Description

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or disrupt service.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶NVDf5/big-ip_edge7101 — 7150
▶NVDf5/big-ip_access_policy_manager7.1.5 — 7.1.6.1+3

🔴Vulnerability Details

1
GHSA
GHSA-xv84-c645-853v: The svpn component of the F5 BIG-IP APM client prior to version 7↗2022-05-13
▶

📋Vendor Advisories

1
F5
CVE-2018-5529: The svpn component of the F5 BIG-IP APM client prior to version 7↗2018-07-12
▶
CVE-2018-5529 — HIGH severity | cvebase