PT-2018-17020 · F5 · F5 Big-Ip Apm

Published 2018-06-01 · Updated 2019-10-03 · CVE-2018-5526

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 13.1.0 through 13.1.0.5

Description The issue occurs under certain conditions where Behavioral DOS (BADOS) protection may fail during an attack.

Recommendations For versions 13.1.0 through 13.1.0.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-5526

Affected Products

F5 Big-Ip Apm

References · 5

• https://support.f5.com/csp/article/K62201098 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5526 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5526 · Security Note
• http://securitytracker.com/id/1041019 · Note
• http://securityfocus.com/bid/104470 · Note