Multiple F5 BIG-IP Products CVE-2018-15327 Remote Privilege Escalation Vulnerability
BID:107473
Info
Multiple F5 BIG-IP Products CVE-2018-15327 Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 107473 |
| Class: | Design Error |
| CVE: |
CVE-2018-15327 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 31 2018 12:00AM |
| Updated: | Oct 31 2018 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
F5 Enterprise Manager 3.1.1 F5 BIG-IP WebAccelerator 14.0 F5 BIG-IP WebAccelerator 13.1.1 F5 BIG-IP WebAccelerator 13.1 F5 BIG-IP WebAccelerator 13.0.1 F5 BIG-IP WebAccelerator 13.0 F5 BIG-IP WebAccelerator 13.1.0.8 F5 BIG-IP WebAccelerator 13.1.0.6 F5 BIG-IP WebAccelerator 13.1.0.5 F5 BIG-IP WebAccelerator 13.1.0.4 F5 BIG-IP PEM 14.0 F5 BIG-IP PEM 13.1.1 F5 BIG-IP PEM 13.1 F5 BIG-IP PEM 13.0.1 F5 BIG-IP PEM 13.0 F5 BIG-IP PEM 13.1.0.8 F5 BIG-IP PEM 13.1.0.6 F5 BIG-IP PEM 13.1.0.5 F5 BIG-IP PEM 13.1.0.4 F5 BIG-IP LTM 14.0 F5 BIG-IP LTM 13.1.1 F5 BIG-IP LTM 13.1 F5 BIG-IP LTM 13.0.1 F5 BIG-IP LTM 13.0 F5 BIG-IP LTM 13.1.0.8 F5 BIG-IP LTM 13.1.0.6 F5 BIG-IP LTM 13.1.0.5 F5 BIG-IP LTM 13.1.0.4 F5 BIG-IP Link Controller 14.0 F5 BIG-IP Link Controller 13.1.1 F5 BIG-IP Link Controller 13.1 F5 BIG-IP Link Controller 13.0.1 F5 BIG-IP Link Controller 13.0 F5 BIG-IP Link Controller 13.1.0.8 F5 BIG-IP Link Controller 13.1.0.6 F5 BIG-IP Link Controller 13.1.0.5 F5 BIG-IP Link Controller 13.1.0.4 F5 BIG-IP GTM 14.0 F5 BIG-IP GTM 13.1.1 F5 BIG-IP GTM 13.1 F5 BIG-IP GTM 13.0.1 F5 BIG-IP GTM 13.1.0.8 F5 BIG-IP GTM 13.1.0.6 F5 BIG-IP GTM 13.1.0.5 F5 BIG-IP GTM 13.1.0.4 F5 BIG-IP GTM 13.0.0 F5 BIG-IP FPS 14.0 F5 BIG-IP FPS 13.1.1 F5 BIG-IP FPS 13.1 F5 BIG-IP FPS 13.0.1 F5 BIG-IP FPS 13.0 F5 BIG-IP FPS 13.1.0.8 F5 BIG-IP Edge Gateway 14.0 F5 BIG-IP Edge Gateway 13.1.1 F5 BIG-IP Edge Gateway 13.1 F5 BIG-IP Edge Gateway 13.0.1 F5 BIG-IP Edge Gateway 13.1.0.6 F5 BIG-IP Edge Gateway 13.1.0.5 F5 BIG-IP Edge Gateway 13.0 F5 BIG-IP DNS 14.0 F5 BIG-IP DNS 13.1.1 F5 BIG-IP DNS 13.1 F5 BIG-IP DNS 13.0.1 F5 BIG-IP DNS 13.0 F5 BIG-IP DNS 13.1.0.8 F5 BIG-IP DNS 13.1.0.7 F5 BIG-IP DNS 13.1.0.6 F5 BIG-IP DNS 13.1.0.5 F5 BIG-IP DNS 13.1.0.4 F5 BIG-IP ASM 14.0 F5 BIG-IP ASM 13.1.1 F5 BIG-IP ASM 13.1 F5 BIG-IP ASM 13.0.1 F5 BIG-IP ASM 13.0 F5 BIG-IP ASM 13.1.0.8 F5 BIG-IP ASM 13.1.0.6 F5 BIG-IP ASM 13.1.0.5 F5 BIG-IP ASM 13.1.0.4 F5 BIG-IP ASM 13.1.0.2 F5 BIG-IP APM 14.0 F5 BIG-IP APM 13.1.1 F5 BIG-IP APM 13.1 F5 BIG-IP APM 13.0.1 F5 BIG-IP APM 13.0 F5 BIG-IP APM 13.1.0.8 F5 BIG-IP APM 13.1.0.6 F5 BIG-IP APM 13.1.0.5 F5 BIG-IP APM 13.1.0.4 F5 BIG-IP Analytics 14.0 F5 BIG-IP Analytics 13.1.1 F5 BIG-IP Analytics 13.1 F5 BIG-IP Analytics 13.0.1 F5 BIG-IP Analytics 13.0 F5 BIG-IP Analytics 13.1.0.8 F5 BIG-IP Analytics 13.1.0.6 F5 BIG-IP Analytics 13.1.0.5 F5 BIG-IP Analytics 13.1.0.4 F5 BIG-IP AFM 14.0 F5 BIG-IP AFM 13.1.1 F5 BIG-IP AFM 13.1 F5 BIG-IP AFM 13.0.1 F5 BIG-IP AFM 13.0 F5 BIG-IP AFM 13.1.0.8 F5 BIG-IP AFM 13.1.0.6 F5 BIG-IP AFM 13.1.0.5 F5 BIG-IP AFM 13.1.0.4 F5 BIG-IP AAM 14.0 F5 BIG-IP AAM 13.1.1 F5 BIG-IP AAM 13.1 F5 BIG-IP AAM 13.0.1 F5 BIG-IP AAM 13.0 F5 BIG-IP AAM 13.1.0.8 F5 BIG-IP AAM 13.1.0.6 F5 BIG-IP AAM 13.1.0.5 F5 BIG-IP AAM 13.1.0.4 |
| Not Vulnerable: |
F5 BIG-IP WebAccelerator 14.1 F5 BIG-IP WebAccelerator 14.0.0.3 F5 BIG-IP WebAccelerator 13.1.1.2 F5 BIG-IP PEM 14.1 F5 BIG-IP PEM 14.0.0.3 F5 BIG-IP PEM 13.1.1.2 F5 BIG-IP LTM 14.1 F5 BIG-IP LTM 14.0.0.3 F5 BIG-IP LTM 13.1.1.2 F5 BIG-IP Link Controller 14.1 F5 BIG-IP Link Controller 14.0.0.3 F5 BIG-IP Link Controller 13.1.1.2 F5 BIG-IP GTM 14.1 F5 BIG-IP GTM 14.0.0.3 F5 BIG-IP GTM 13.1.1.2 F5 BIG-IP FPS 14.1 F5 BIG-IP FPS 14.0.0.3 F5 BIG-IP FPS 13.1.1.2 F5 BIG-IP Edge Gateway 14.1 F5 BIG-IP Edge Gateway 14.0.0.3 F5 BIG-IP Edge Gateway 13.1.1.2 F5 BIG-IP DNS 14.1 F5 BIG-IP DNS 14.0.0.3 F5 BIG-IP DNS 13.1.1.2 F5 BIG-IP ASM 14.1 F5 BIG-IP ASM 14.0.0.3 F5 BIG-IP ASM 13.1.1.2 F5 BIG-IP APM 14.1 F5 BIG-IP APM 14.0.0.3 F5 BIG-IP APM 13.1.1.2 F5 BIG-IP Analytics 14.1 F5 BIG-IP Analytics 14.0.0.3 F5 BIG-IP AFM 14.1 F5 BIG-IP AFM 14.0.0.3 F5 BIG-IP AFM 13.1.1.2 F5 BIG-IP AAM 14.1 F5 BIG-IP AAM 14.0.0.3 F5 BIG-IP AAM 13.1.1.2 |
Discussion
Multiple F5 BIG-IP Products CVE-2018-15327 Remote Privilege Escalation Vulnerability
Multiple F5 BIG-IP Products are prone to a privilege-escalation vulnerability.
An attacker can exploit this issue to gain elevated privileges and perform unauthorized actions.
The following products and versions are vulnerable:
BIG-IP 14.0.0
BIG-IP 13.0.0 through 13.1.1
Enterprise Manager 3.1.1
Multiple F5 BIG-IP Products are prone to a privilege-escalation vulnerability.
An attacker can exploit this issue to gain elevated privileges and perform unauthorized actions.
The following products and versions are vulnerable:
BIG-IP 14.0.0
BIG-IP 13.0.0 through 13.1.1
Enterprise Manager 3.1.1
Exploit / POC
Multiple F5 BIG-IP Products CVE-2018-15327 Remote Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple F5 BIG-IP Products CVE-2018-15327 Remote Privilege Escalation Vulnerability
References:
References: