CVE-2018-5546
First published: Thu Aug 16 2018(Updated: )
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 Big-ip Access Policy Manager Client | >=7.1.5<=7.1.7 | |
| Apple macOS | ||
| Linux Linux kernel | ||
| F5 BIG-IP Access Policy Manager | >=12.1.0<=12.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-5546?
CVE-2018-5546 is a vulnerability in the svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS, which allows an unprivileged user to get ownership of files owned by root on the local client host.
What is the severity of CVE-2018-5546?
CVE-2018-5546 has a severity rating of 7.8 (high).
How does CVE-2018-5546 affect F5 Big-IP Access Policy Manager Client?
CVE-2018-5546 affects F5 Big-IP Access Policy Manager Client versions between 7.1.5 and 7.1.7, allowing an unprivileged user to gain ownership of root-owned files on the local client host.
What is the affected software by CVE-2018-5546?
The affected software by CVE-2018-5546 includes F5 Big-IP Access Policy Manager Client versions between 7.1.5 and 7.1.7 for Linux and macOS.
How can I fix CVE-2018-5546?
To fix CVE-2018-5546, upgrade F5 BIG-IP APM client to version 7.1.7.1 for Linux and macOS.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/f5
- canonical/f5 big-ip access policy manager client
- version/f5 big-ip access policy manager client/7.1.5
- version/f5 big-ip access policy manager client/7.1.7
- vendor/apple
- canonical/apple macos
- vendor/linux
- canonical/linux linux kernel
- canonical/f5 big-ip access policy manager
- version/f5 big-ip access policy manager/12.1.0
- version/f5 big-ip access policy manager/12.1.3