CVE-2018-15334

A cross-site request forgery CSRF vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication...

CVE-2018-15335

When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failur...

CVE-2018-15334

The CVE-2018-15334 entry affects F5 BIG-IP APM webtop, where a CSRF vulnerability in the APM webtop 11.2.1+ can force a user session logout and require re-authentication. Affected components: BIG-IP APM webtop. Root cause: CSRF allowing session logout. Impact: remote attacker could cause a user t...

CVE-2018-15335

The CVE-2018-15335 issue affects BIG-IP APM when deployed as an OAuth Resource Server: in affected 13.0.0–13.1.1 versions, the failure response may omit intended diagnostic content after lost communication with the external OAuth server. F5’s security advisory indicates that for BIG-IP APM, a fix...

CVE-2018-15334

A cross-site request forgery CSRF vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication...

CVE-2018-15335

When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failur...

F5 Networks BIG-IP : BIG-IP APM OAuth failure response message vulnerability (K27617652)

When APM is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failure response...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1897)

Summary IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise formerly IBM IoT Predictive Maintenance and Optimization. Information about some security vulnerabilities affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the...

F5 BIG-IP APM and BIG-IP APM Clients svpn elevation of privilege vulnerability

F5 BIG-IP APM and BIG-IP APM Clients are both products of F5 Corporation in the U.S. F5 BIG-IP APM is a suite of access and security solutions. the APM Client is a suite of APM client software. svpn is one of the private VPN components. An elevation of privilege vulnerability exists in F5 BIG-IP...

CVE-2018-15332

The CVE affects F5 BIG-IP APM: the svpn component for Linux/macOS versions prior to 7.1.7.2 runs as a privileged process and, in a race condition, an unprivileged user can gain ownership of files owned by root on the local host. This enables local privilege escalation and potential information di...

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

Race condition

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

english.apm.sh.cn Open Redirect vulnerability

Open Bug Bounty ID: OBB-703733 Description| Value ---|--- Affected Website:| english.apm.sh.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden until...

F5 Networks BIG-IP : BIG-IP APM client for Linux and macOS vulnerability (K52171282)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.9 / 11.6.3.3 / 12.1.3.7 / 13.1.1.2 / 14.0.0 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K52171282 advisory. - The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K23024812)

When the BIG-IP APM system renders certain pages with a logon agent or a confirm box, the system may disclose configuration information such as partition and agent names via URI parameters. CVE-2018-5544 Impact This vulnerability allows unauthorized disclosure of information. C Tenable Network...

F5 Networks BIG-IP : BIG-IP APM Portal Access vulnerability (K54358225)

In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application...

F5 Networks BIG-IP : TMM vulnerability (K27044729)

Under certain conditions, theTraffic Management Microkernel TMM may restart and produce a core file while processing BIG-IP APM data. CVE-2018-5528 Impact This vulnerability allows remote attackers to cause a denial of service DoS on the BIG-IP system. The BIG-IP system will temporarily fail to...

F5 Networks BIG-IP : BIG-IP APM SAML IdP vulnerability (K05018525)

APMD may core when processing SAML Assertion or response containing certain elements.CVE-2018-5549 Impact This vulnerability allows a disruption of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution...

F5 Networks BIG-IP : BIG-IP APM client for Linux and macOS vulnerability (K54431371)

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to getownership of files owned by root on the local client host.CVE-2018-5546 Impact A malicious, local, unprivileged user...