What is CVE-2018-15321?

CVE-2018-15321 is a medium-severity vulnerability in F5 Big-ip_access_policy_manager, classified under Improper Privilege Management. CVSS score: 4.9/10. Published 2018-10-31.

How severe is CVE-2018-15321?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Privilege escalation in F5 Big-ip_access_policy_manager

CVE-2018-15321

When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.1.0-2.3.0, or Enterprise Manager 3.1.1…

Vulnerability class: Privilege Escalation

EPSS: 0.009 (55.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

f5sirt@f5.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2018-15321?: CVE-2018-15321 is a medium-severity vulnerability in F5 Big-ip_access_policy_manager, classified under Improper Privilege Management. CVSS score: 4.9/10. Published 2018-10-31.
How severe is CVE-2018-15321?: Medium severity. CVSS v3 base score is 4.9 out of 10.