7.5
CVE-2018-15326
- EPSS 0.16%
- Published 31.10.2018 14:29:00
- Last modified 21.11.2024 03:50:34
- Source f5sirt@f5.com
- Teams watchlist Login
- Open Login
In some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.2, the CRLDP Auth access policy agent may treat revoked certificates as valid when the BIG-IP APM system fails to download a new Certificate Revocation List.
Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Access Policy Manager Version >= 11.6.0 <= 11.6.3.2
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Access Policy Manager Version >= 13.0.0 <= 13.1.0.7
F5 ≫ Big-ip Access Policy Manager Version >= 14.0.0 <= 14.0.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.16% | 0.33 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 1.6 | 5.9 |
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.