Vulnerability in F5 Big-Ip Access Policy Manager
CVE-2018-5532
On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.012 (66.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 66.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- F5 Big-Ip Access Policy Manager — versions 13.0.0
- F5 Big-Ip Advanced Firewall Manager — versions 13.0.0
- F5 Big-Ip Analytics — versions 13.0.0
- F5 Big-Ip Application Acceleration Manager — versions 13.0.0
- F5 Big-Ip Application Security Manager — versions 13.0.0
- F5 Big-Ip Domain Name System — versions 13.0.0
- F5 Big-Ip Edge Gateway — versions 13.0.0
- F5 Big-Ip Fraud Protection Service — versions 13.0.0
- F5 Big-Ip Global Traffic Manager — versions 13.0.0
- F5 Big-Ip Link Controller — versions 13.0.0
References
- www.securitytracker.com/id/1041345 (VDB Entry, Third Party Advisory, vdb-entry)
- support.f5.com/csp/article/K48224824 (Vendor Advisory)
Frequently asked questions
- What is CVE-2018-5532?
- CVE-2018-5532 is a medium-severity vulnerability in F5 Big-Ip Access Policy Manager. CVSS score: 5.3/10. Published 2018-07-19.
- How severe is CVE-2018-5532?
- Medium severity. CVSS v3 base score is 5.3 out of 10.