K35195140: BIG-IQ Access Manager role vulnerability CVE-2017-6152

Security Advisory Description A local BIG-IQ user with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password. CVE-2017-6152 Impact This vulnerability allows increased privileges for user accounts with the Access...

CVE-2017-6152

The CVE concerns F5 BIG-IQ Centralized Management versions 5.1.0–5.2.0 where a local user with the Access Manager role can change the passwords of other users, including the local admin. The underlying issue is a privilege escalation within BIG-IQ’s Access Manager scope that allows password chang...

CVE-2017-6152

A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password...