CVE-2018-15332
06.12.2018, 13:29
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.
| Vendor | Product | Version |
|---|---|---|
| f5 | big-ip_access_policy_manager | 11.5.1 ≤ 𝑥 ≤ 11.6.3 |
| f5 | big-ip_access_policy_manager | 12.1.0 ≤ 𝑥 ≤ 12.1.3 |
| f5 | big-ip_access_policy_manager | 13.0.0 ≤ 𝑥 ≤ 13.1.1 |
| f5 | big-ip_access_policy_manager | 14.0.0 |
| f5 | big-ip_access_policy_manager_client | 7.1.5 ≤ 𝑥 ≤ 7.1.7 |
𝑥
= Vulnerable software versions