Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

BIG‑IP Access Policy Manager can cause system restart

CVE-2018-15324 · published 8 years ago
Summary

Versions of BIG‑IP Access Policy Manager between 13.0.0 and 14.0.0.2 may unexpectedly restart the traffic manager when they receive a specially crafted web request. This can interrupt network services and affect users trying to access applications through the portal. Apply the latest software update from the vendor or follow their guidance to patch the affected versions.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
f5 big-ip_access_policy_manager >= 13.0.0, <= 13.1.1.1
>= 14.0.0, <= 14.0.0.2
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
Original advisory text
On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access.
On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.9 Medium
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published31 Oct 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-15324 · NVD
Track software like this
Free during beta