CVE-2018-5544: Infoleak
Published Jul 31, 2018
·Updated
When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters.
Affected Software
2 affected components
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.3
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1
Event History
Jul 31, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-5544?
CVE-2018-5544 is classified as a medium severity vulnerability.
2
How do I fix CVE-2018-5544?
To mitigate CVE-2018-5544, you should upgrade F5 BIG-IP APM to version 12.1.4 or 13.1.2 or later.
3
What type of information can be disclosed by CVE-2018-5544?
CVE-2018-5544 can disclose sensitive configuration information such as partition and agent names through URI parameters.
4
Which versions of F5 BIG-IP APM are affected by CVE-2018-5544?
F5 BIG-IP APM versions 12.1.0 to 12.1.3 and 13.0.0 to 13.1.1 are affected by CVE-2018-5544.
5
Is CVE-2018-5544 a local or remote vulnerability?
CVE-2018-5544 is considered a remote vulnerability as it can be exploited without physical access to the affected system.