CVE-2018-15316

2018-10-1700:00:00

www.cve.org

0.001 Low

EPSS

Percentile

20.4%

JSON

In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.

CNA Affected

[
  {
    "product": "BIG-IP (APM)",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "13.0.0-13.1.1.1"
      }
    ]
  },
  {
    "product": "BIG-IP APM Clients",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7.1.5 - 7.1.6"
      }
    ]
  },
  {
    "product": "BIG-IP Edge Client",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "7101 - 7160"
      }
    ]
  }
]