VULNERABILITY INTELLIGENCE

CVE-2017-6152

CVSS score6.7 MEDIUM

EPSS probability0.30%

CISA KEVNot currently listed

Published2018-03-08

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has privileges to change the passwords of other users on the system, including the local admin account password.

Weakness classification

CWE-269: Improper Privilege Management

Primary references

f5sirt@f5.com — Third Party Advisory, VDB Entry
f5sirt@f5.com — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory