CVE-2018-5547: f5 networks, inc. big-ip apm client for windows Missing Authorization
Vulnerability summary
CVE-2018-5547 is a high (CVSS 7.8) Missing Authorization vulnerability in f5 networks, inc. big-ip apm client for windows. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.9% of scored vulnerabilities.
Timeline
- 17-08-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy. By clicking on the link, unprivileged users can open additional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privilege. Windows Logon Integration is vulnerable when the APM client is installed by an administrator on a user machine. Users accessing the local machine can get administrator privileges
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
17%
Versus all other CVEs
30-day change
0.00 pp
From 0.26% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
F51 product
- big-ip_access_policy_manager_client7.1.6 | 7.1.6.1 | 7.1.7
F5 networks, inc.1 product
- big-ip apm client for windowsPrior to version 7.1.7.1
2 vendors · 2 products