CVE-2018-5529: f5 networks, inc. big-ip apm client for linux and mac osx
Vulnerability summary
CVE-2018-5529 is a high (CVSS 7.8) vulnerability in f5 networks, inc. big-ip apm client for linux and mac osx. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 40.3% of scored vulnerabilities.
Timeline
- 12-07-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or disrupt service.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.48%
Chance of exploitation in the next 30 days
Percentile
40%
Versus all other CVEs
30-day change
0.00 pp
From 0.48% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
F52 products
- big-ip_access_policy_manager≥ 7.1.5, ≤ 7.1.6.1 | ≥ 11.5.1, ≤ 11.5.6 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.0
- big-ip_edge≥ 7101, ≤ 7150
F5 networks, inc.1 product
- big-ip apm client for linux and mac osxprior to version 7.1.7
2 vendors · 3 products