K82038789 : big3d vulnerability CVE-2018-5540

2018-07-1800:00:00

my.f5.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.1%

JSON

Security Advisory Description

The big3d process does not irrevocably minimize group privileges at startup. (CVE-2018-5540)

Impact

There is not a known attack vector, but if the big3d process is compromised, it is possible for it to regain the group privileges it was launched with.

CPENameOperatorVersion
big-iq centralized managementeq4.6.0
big-iq centralized managementeq5.0.0
big-iq centralized managementeq5.1.0
big-iq centralized managementeq5.2.0
big-iq centralized managementeq5.3.0
big-iq centralized managementeq5.4.0
big-iq centralized managementeq6.0.0
big-ip afmeq11.5.1
big-ip afmeq11.5.2
big-ip afmeq11.5.3

Name	Operator	Version
big-iq centralized management	eq	4.6.0
big-iq centralized management	eq	5.0.0
big-iq centralized management	eq	5.1.0
big-iq centralized management	eq	5.2.0
big-iq centralized management	eq	5.3.0
big-iq centralized management	eq	5.4.0
big-iq centralized management	eq	6.0.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.5.2
big-ip afm	eq	11.5.3

Rows per page:

1-10 of 1811