Lucene search
F5CVELIST:CVE-2018-5502HistoryMar 21, 2018 - 12:00 a.m.
CVE-2018-5502
2018-03-2100:00:00
f5
www.cve.org
1
0.001 Low
EPSS
Percentile
40.2%
On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client certificate authentication is not enabled by default in Client SSL profile. There is no control plane exposure.
CNA Affected
[
{
"product": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
"vendor": "F5 Networks, Inc.",
"versions": [
{
"status": "affected",
"version": "13.0.0 - 13.1.0.3"
}
]
}
]Related
cve
cve
CVE-2018-5502
2018-03-22 18:29:00
nvd
nvd
CVE-2018-5502
2018-03-22 18:29:00
prion
prion
Authentication flaw
2018-03-22 18:29:00
nessus
nessus
F5 Networks BIG-IP : BIG-IP Client SSL vulnerability (K43121447)
2018-11-02 00:00:00
f5
f5
K43121447 : BIG-IP Client SSL vulnerability CVE-2018-5502
2018-03-21 00:00:00