CVE-2018-15316

In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
VendorProductVersion
f5big-ip_access_policy_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_access_policy_manager_client
7.1.5 ≤
𝑥
≤ 7.1.6
f5big-ip_edge_client
7101 ≤
𝑥
≤ 7160
𝑥
= Vulnerable software versions