CVE-2018-5529: High severity F5 BIG-IP Access Policy Manager vulnerability
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or disrupt service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
F5 BIG-IP APM client (svpn)to a version that resolves this vulnerability.Fixed in 7.1.7
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5529?
CVE-2018-5529 is classified as a high severity vulnerability due to the potential for unprivileged users to escalate their privileges.
How do I fix CVE-2018-5529?
To remediate CVE-2018-5529, upgrade to F5 BIG-IP APM client version 7.1.7 or later.
What versions of F5 BIG-IP Access Policy Manager are affected by CVE-2018-5529?
CVE-2018-5529 affects F5 BIG-IP Access Policy Manager versions prior to 7.1.7, as well as several versions from 11.5.1 to 12.1.3.
Can CVE-2018-5529 be exploited remotely?
No, CVE-2018-5529 requires local access to the client machine to exploit.
What is the potential impact of CVE-2018-5529?
The exploitation of CVE-2018-5529 can lead to unauthorized access to sensitive information and the ability for an attacker to execute commands with super-user privileges.