CVE-2018-15316: Medium severity f5 access policy manager vulnerability
In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-15316.
What is the severity of CVE-2018-15316?
The severity of CVE-2018-15316 is medium (5.5).
Which software is affected by CVE-2018-15316?
The F5 Big-ip Access Policy Manager, F5 Big-ip Access Policy Manager Client, and F5 Big-ip Edge Client are affected by CVE-2018-15316.
How does CVE-2018-15316 affect the F5 Big-ip APM Edge Client?
CVE-2018-15316 allows the BIG-IP APM Edge Client to load the policy library with user permission and bypass endpoint checks.
Is there any additional information available about CVE-2018-15316?
Yes, you can find additional information about CVE-2018-15316 at the following references: [1] http://www.securityfocus.com/bid/105731 [2] http://www.securitytracker.com/id/1041936 [3] https://support.f5.com/csp/article/K51220077