First published: Fri Jun 01 2018(Updated: )
Under certain conditions, on F5 BIG-IP ASM 13.1.0-13.1.0.5, Behavioral DOS (BADOS) protection may fail during an attack.
Credit: f5sirt@f5.com
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP Application Security Manager | >=13.1.0<=13.1.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-5526 is rated as a medium severity vulnerability.
To fix CVE-2018-5526, upgrade your F5 BIG-IP ASM to version 13.1.0.6 or later.
CVE-2018-5526 is caused by the Behavioral DOS (BADOS) protection failing under certain attack conditions.
CVE-2018-5526 affects F5 BIG-IP ASM versions 13.1.0 to 13.1.0.5.
Yes, CVE-2018-5526 can be exploited remotely if the conditions for an attack are met.