PT-2018-17040 · F5 · F5 Big-Ip Apm

Rich Mirch · Publicado 2018-08-17 · Atualizado 2022-04-18 · CVE-2018-5546

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7.1 for Linux and macOS

Description The issue allows an unprivileged user to gain ownership of files owned by root on the local client host, potentially leading to the disclosure of sensitive information, data manipulation, or assumption of super-user privileges. This is due to the svpn and policyserver components running as a privileged process.

Recommendations For F5 BIG-IP APM client versions prior to 7.1.7.1 for Linux and macOS, update to version 7.1.7.1 or later to resolve the issue.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-5546

Produtos afetados

F5 Big-Ip Apm

Referências · 5

• 🔥 https://github.com/mirchr/security-research/blob/master/vulnerabilities/F5/CVE-2018-5529.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-5546 · Nota de Segurança
• http://securitytracker.com/id/1041510 · Nota
• https://support.f5.com/csp/article/K54431371 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5546 · Aviso do Fabricante