Skip to content
OpenAdvisories
Unscored CVE-2018-15332 EUVD-2018-7210GHSA-pqqq-8453-mph5

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an u…

Published Dec 6, 2018 · Updated Aug 5, 2024 · Assigned by f5

Vendor: F5 Product: BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client Category: Browsers Category: Network devices

Description

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.

Affected products

VendorProductAffectedFixed
F5 Networks BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client APM Client 7.1.5 - 7.1.7.1, Edge Client 7101 - 7150 —

References