High severity7.8NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026

CVE-2018-15331

Description

On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.

Affected products

F5, Inc./BIG-IP AAMllm-create
Range: 12.1.0-12.1.3.7, 13.0.0
F5, Inc./Big IPcpe-rescue
Range: 13.0.0, 12.1.0-12.1.3.7

Patches

Vulnerability mechanics

References

support.f5.com/csp/article/K54843525nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000