Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of file

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 Networks, Inc. BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client

  • APM Client 7.1.5 - 7.1.7.1, Edge Client 7101 - 7150affected

References