CVE-2018-15316
In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.
- Score
- CVSS 3.0 5.5 Medium
- Status
- Modified - f5sirt@f5.com
- Published
- 2018-10-19
- Last modified
- 2024-09-17
Affected products
- Big-ip Access Policy Manager (F5)
- Big-ip Access Policy Manager Client (F5)
- Big-ip Edge Client (F5)
- Big-ip Apm (F5 Networks Inc.)
- Big-ip Apm Clients (F5 Networks Inc.)
- Big-ip Edge Client (F5 Networks Inc.)
References
- http://www.securityfocus.com/bid/105731
- http://www.securitytracker.com/id/1041936
- https://support.f5.com/csp/article/K51220077
