Description
The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
F5 Networks, Inc. BIG-IP APM client for Linux
Prior to version 7.1.7.1affected
F5 Networks, Inc. BIG-IP APM client for macOS
Prior to version 7.1.7.1affected