← CVE Intelligence

CVE-2018-15331

F5 Networks, Inc. / BIG-IP (AAM) PUBLISHED

Description (CNA)

On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.

Affected (CNA)

Vendor / productVersions
F5 Networks, Inc. / BIG-IP (AAM)affected 13.0.0, 12.1.0-12.1.3.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.