Auth bypass in F5 Big-Ip Access Policy Manager Client
CVE-2018-5547
Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy. By clicking on the link, unprivileged users can open additional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privilege. Windows Logon Integration is vulnerable when the APM client is installed by an administrator on a user machine. Users accessing the local machine can get administrator privileges
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (18.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 18th percentile — 18.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- F5 Big-Ip Access Policy Manager Client — versions 7.1.6, 7.1.6.1, 7.1.7
- F5 Networks, Inc. Big-Ip Apm Client For Windows — versions Prior to version 7.1.7.1
Weakness classification (CWE)
References
- support.f5.com/csp/article/K10015187 (Vendor Advisory)
- www.securitytracker.com/id/1041511 (VDB Entry, Third Party Advisory, vdb-entry)
- support.f5.com/csp/article/K10015187
Frequently asked questions
- What is CVE-2018-5547?
- CVE-2018-5547 is a high-severity vulnerability in F5 Big-Ip Access Policy Manager Client, classified under Missing Authorization. CVSS score: 7.8/10. Published 2018-08-17.
- How severe is CVE-2018-5547?
- High severity. CVSS v3 base score is 7.8 out of 10.