Medium severity6.1NVD Advisory· Published Sep 13, 2018· Updated Jun 17, 2026
CVE-2018-5548
CVE-2018-5548
Description
On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- sbudella.altervista.org/blog/20180911-cve-2018-5548.htmlnvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/105353nvdThird Party AdvisoryVDB Entry
- support.f5.com/csp/article/K66171422nvdVendor Advisory
News mentions
0No linked articles in our index yet.