CVE-2017-6152

Name of the Vulnerable Software and Affected Versions F5 BIG-IQ Centralized Management versions 5.1.0 through 5.2.0

Description A local user with the Access Manager role has the ability to change the passwords of other users on the system, including the local admin account password.

Recommendations For F5 BIG-IQ Centralized Management versions 5.1.0 through 5.2.0, consider restricting the privileges of the Access Manager role to prevent unauthorized password changes. As a temporary workaround, monitor user account activity closely and restrict access to the system to minimize the risk of exploitation.