high7.0
CVE-2018-15332
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to …
Impact
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Access Policy Manager | from 11.5.1 through 11.6.3 from 12.1.0 through 12.1.3 from 13.0.0 through 13.1.1 Version 14.0.0 |
| F5 | Big-Ip Access Policy Manager Client | from 7.1.5 through 7.1.7 |