K35195140 : BIG-IQ Access Manager role vulnerability CVE-2017-6152

2018-03-0700:00:00

my.f5.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

Security Advisory Description

A local BIG-IQ user with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password. (CVE-2017-6152)

Impact

This vulnerability allows increased privileges for user accounts with the Access Manager role.

CPENameOperatorVersion
big-iq centralized managementeq4.6.0
big-iq centralized managementeq5.0.0
big-iq centralized managementeq5.1.0
big-iq centralized managementeq5.2.0
big-iq centralized managementeq5.3.0
big-iq centralized managementeq5.4.0
big-ip afmeq11.5.1
big-ip afmeq11.5.2
big-ip afmeq11.5.3
big-ip afmeq11.5.4

Name	Operator	Version
big-iq centralized management	eq	4.6.0
big-iq centralized management	eq	5.0.0
big-iq centralized management	eq	5.1.0
big-iq centralized management	eq	5.2.0
big-iq centralized management	eq	5.3.0
big-iq centralized management	eq	5.4.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.5.2
big-ip afm	eq	11.5.3
big-ip afm	eq	11.5.4

Rows per page:

1-10 of 1611

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for F5:K35195140