CVE-2018-5546

2018-08-1600:00:00

www.cve.org

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

JSON

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.

CNA Affected

[
  {
    "product": "BIG-IP APM client for Linux",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to version 7.1.7.1"
      }
    ]
  },
  {
    "product": "BIG-IP APM client for macOS",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to version 7.1.7.1"
      }
    ]
  }
]