CVE-2018-15316
First published: Fri Oct 19 2018(Updated: )
In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 Big-ip Access Policy Manager | >=13.0.0<=13.1.1.1 | |
| F5 Big-ip Access Policy Manager Client | >=7.1.5<=7.1.6 | |
| F5 Big-ip Edge Client | >=7101<=7160 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-15316.
What is the severity of CVE-2018-15316?
The severity of CVE-2018-15316 is medium (5.5).
Which software is affected by CVE-2018-15316?
The F5 Big-ip Access Policy Manager, F5 Big-ip Access Policy Manager Client, and F5 Big-ip Edge Client are affected by CVE-2018-15316.
How does CVE-2018-15316 affect the F5 Big-ip APM Edge Client?
CVE-2018-15316 allows the BIG-IP APM Edge Client to load the policy library with user permission and bypass endpoint checks.
Is there any additional information available about CVE-2018-15316?
Yes, you can find additional information about CVE-2018-15316 at the following references: [1] http://www.securityfocus.com/bid/105731 [2] http://www.securitytracker.com/id/1041936 [3] https://support.f5.com/csp/article/K51220077
- collector/nvd-index
- agent/references
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/f5
- canonical/f5 big-ip access policy manager
- version/f5 big-ip access policy manager/13.0.0
- version/f5 big-ip access policy manager/13.1.1.1
- canonical/f5 big-ip access policy manager client
- version/f5 big-ip access policy manager client/7.1.5
- version/f5 big-ip access policy manager client/7.1.6
- canonical/f5 big-ip edge client
- version/f5 big-ip edge client/7101
- version/f5 big-ip edge client/7160