CVE-2018-5502

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate

published March 22, 2018

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client certificate authentication is not enabled by default in Client SSL profile. There is no control plane exposure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01325 · 70.5th percentile
Published
2018-03-22T18:00Z
EPSS history
Timeline
  • 22 MAR 18:00Z
    On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate
    cvelistv5