CVE-2018-15316

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 13.0.0 through 13.1.1.1 APM Client versions 7.1.5 through 7.1.6 Edge Client versions 7101 through 7160

Description The issue concerns the BIG-IP APM Edge Client component, which loads the policy library with user permission and bypasses endpoint checks.

Recommendations For F5 BIG-IP APM versions 13.0.0 through 13.1.1.1, consider restricting access to the policy library to prevent unauthorized loading. For APM Client versions 7.1.5 through 7.1.6, restrict the use of the Edge Client component until a fix is available. For Edge Client versions 7101 through 7160, disable the loading of the policy library with user permission to minimize the risk of exploitation.