CVE-2018-15332

N/A

Description

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.

CVE Details

CVSS v3.1 ScoreN/A

Published12/6/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

apple:macosf5:big-ip_access_policy_managerf5:big-ip_access_policy_manager_clientlinux:linux_kernel

Weaknesses (CWE)

CWE-362

References

http://www.securityfocus.com/bid/106135(f5sirt@f5.com)

https://support.f5.com/csp/article/K12130880(f5sirt@f5.com)

http://www.securityfocus.com/bid/106135(af854a3a-2127-422b-91ae-364da2661108)

https://support.f5.com/csp/article/K12130880(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.