CVE-2018-5546: High severity f5 big-ip access policy manager vulnerability
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5546?
CVE-2018-5546 is a vulnerability in the svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS, which allows an unprivileged user to get ownership of files owned by root on the local client host.
What is the severity of CVE-2018-5546?
CVE-2018-5546 has a severity rating of 7.8 (high).
How does CVE-2018-5546 affect F5 Big-IP Access Policy Manager Client?
CVE-2018-5546 affects F5 Big-IP Access Policy Manager Client versions between 7.1.5 and 7.1.7, allowing an unprivileged user to gain ownership of root-owned files on the local client host.
What is the affected software by CVE-2018-5546?
The affected software by CVE-2018-5546 includes F5 Big-IP Access Policy Manager Client versions between 7.1.5 and 7.1.7 for Linux and macOS.
How can I fix CVE-2018-5546?
To fix CVE-2018-5546, upgrade F5 BIG-IP APM client to version 7.1.7.1 for Linux and macOS.