CVE-2018-5546
published 2018-08-17CVE-2018-5546: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an…
PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.45%
36.6th percentile
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_access_policy_manager | 12.1.0 – 12.1.3 | — |
| f5 | big-ip_access_policy_manager_client | — | — |
| f5 | big-ip_access_policy_manager_client | 7.1.5 – 7.1.7 | — |
| f5 | big-ip_apm | — | — |
| f5_networks_inc | big-ip_apm_client_for_linux | — | — |
| f5_networks_inc | big-ip_apm_client_for_macos | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2018-5546: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7
vendor_f5·2018-08-17·CVSS 7.8
CVE-2018-5546 [HIGH] CWE-732 CVE-2018-5546: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7
CVE-2018-5546: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.
Affected Products: BIG-IP APM, Big-Ip Access Policy Manager Client
Affected Versions: 12.1.0 - 12.1.3; 7.1.5 - 7.1.7
F5 Advisory Articles: K54431371
F5 References: https://support.f5.com/csp/article/K54431371
GHSA
GHSA-825g-8x8x-f7wm: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7
ghsa_unreviewed·2022-05-13
CVE-2018-5546 [HIGH] CWE-732 GHSA-825g-8x8x-f7wm: The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securitytracker.com/id/1041510https://github.com/mirchr/security-research/blob/master/vulnerabilities/F5/CVE-2018-5529.txthttps://support.f5.com/csp/article/K54431371http://www.securitytracker.com/id/1041510https://github.com/mirchr/security-research/blob/master/vulnerabilities/F5/CVE-2018-5529.txthttps://support.f5.com/csp/article/K54431371
2018-08-17
Published