CVE-2018-5502: High severity F5 BIG-IP Access Policy Manager vulnerability
On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client certificate authentication is not enabled by default in Client SSL profile. There is no control plane exposure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure client certificate authentication is not enabled in the Client SSL profile (Client certificate authentication is not enabled by default). Apply this to virtual servers associated with a Client SSL profile that enables client certificate authentication.
F5 BIG-IP (Client SSL profile / Client Certificate authentication) client certificate authentication = disabled
Event History
Frequently Asked Questions
What is CVE-2018-5502?
CVE-2018-5502 is a vulnerability on F5 BIG-IP versions 13.0.0 - 13.1.0.3 that allows attackers to disrupt services on the BIG-IP system with a maliciously crafted client certificate.
Which software versions are affected by CVE-2018-5502?
CVE-2018-5502 affects F5 BIG-IP versions 13.0.0 - 13.1.0.3.
What is the severity of CVE-2018-5502?
CVE-2018-5502 has a severity rating of 7.5 (High).
How can an attacker exploit CVE-2018-5502?
An attacker can exploit CVE-2018-5502 by using a maliciously crafted client certificate to disrupt services on the BIG-IP system.
Are there any references for CVE-2018-5502?
Yes, you can find references for CVE-2018-5502 on SecurityTracker and the F5 support website.