TI-2018-04052 Aliases CVE-2018-5547 GHSA-m3rp-fqh4-whc7

Missing authorization in F5 BIG-IP APM client for Windows

LOW 34CWE-862Published 2018-08-17 · Updated 2024-09-17

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-862.

Summary

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy. By clicking on the link, unprivileged users can open additional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privilege. Windows Logon Integration is vulnerable when the APM client is installed by an administrator on a user machine. Users accessing the local machine can get administrator privileges

Why it matters now

EPSS 0.00262 18th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
F5	BIG-IP APM client for Windows	Prior to version 7.1.7.1	—	No fix listed	CNA

BIG-IP APM client for Windows VendorF5 Affected Prior to version 7.1.7.1 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.6:::::::*	7.1.6	Vulnerable	F5
cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.6.1:::::::*	7.1.6.1	Vulnerable	F5
cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.7:::::::*	7.1.7	Vulnerable	F5

cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.6:*:*:*:*:*:*:* Versions 7.1.6 Vulnerable ·F5
cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.6.1:*:*:*:*:*:*:* Versions 7.1.6.1 Vulnerable ·F5
cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.7:*:*:*:*:*:*:* Versions 7.1.7 Vulnerable ·F5

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-5547
2026-10-03 Alias added: GHSA-m3rp-fqh4-whc7

References

Advisory 1

https://support.f5.com/csp/article/K10015187

Other 1

https://support.f5.com/csp/article/K10015187?utm_source=f5support&amp%3Butm_medium=RSS

TI-2020-04815 Use after free in F5 Edge Client CVSS 3.1HIGH 8.8
TI-2023-23104 BIG-IP APM Clients TunnelCrack vulnerability CVSS 3.1HIGH 8.2
TI-2019-04706 Sensitive information in log files in BIG-IP APM Edge Client CVSS 3.1HIGH 7.5
TI-2024-19079 BIG-IP APM browser network access VPN client vulnerability CVSS 3.1HIGH 7.4
TI-2022-11356 Uncontrolled search path in F5 BIG-IP APM CVSS 3.1HIGH 7.8
TI-2020-04814 Incorrect default permissions in F5 Edge Client CVSS 3.1HIGH 7.8

See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences