What’s Vulnerable › Vulnerabilities

CVE-2018-15328

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-12-12 · updated 2026-06-17
• Weakness: CWE-200

Description

On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used for authentication and privacy are not handled by the BIG-IP system Secure Vault feature; they are written in the clear to the various configuration files.

Affected products

• F5 BIG-IP APM: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• BIG-IP: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Big-Ip Analytics: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Networks, Inc. BIG-IP (AAM): from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• BIG-IP ASM: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 BIG-IP DNS: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Big-Ip Edge Gateway: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Big-Ip Fraud Protection Service: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Big-Ip Global Traffic Manager: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Big-Ip Link Controller: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 BIG-IP (LTM): from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Networks, Inc. BIG-IP (PEM): from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 Big-Ip Webaccelerator: from 11.2.1 through 11.6.3; from 12.1.0 through 12.1.3; from 13.0.0 through 13.1.1; 14.0.0
• F5 BIG-IQ: from 5.0.0 through 5.4.0; from 6.0.0 through 6.0.1; 4.6.0
• F5 Networks, Inc. Enterprise Manager: 3.1.1
• F5 Networks, Inc. iWorkflow: from 2.2.0 through 2.3.0

References

• http://www.securityfocus.com/bid/106258
• https://support.f5.com/csp/article/K42027747
• http://www.securityfocus.com/bid/106258
• https://support.f5.com/csp/article/K42027747

Get alerted when CVE-2018-15328 or the next vulnerability affects your stack