Vulnerability Description
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Application Acceleration Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Advanced Firewall Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Analytics | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Access Policy Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Application Security Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Edge Gateway | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Global Traffic Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Link Controller | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Policy Enforcement Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Webaccelerator | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Websafe | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Domain Name System | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Enterprise Manager | 3.1.1 |
| F5 | Big-Iq Centralized Management | >= 5.0.0, <= 5.4.0 |
| F5 | Big-Iq Cloud And Orchestration | 1.0.0 |
| F5 | F5 Iworkflow | >= 2.0.2, <= 2.3.0 |
Related Weaknesses (CWE)
References
- http://www.securitytracker.com/id/1040799Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040800Third Party AdvisoryVDB Entry
- https://support.f5.com/csp/article/K37442533Vendor Advisory
- http://www.securitytracker.com/id/1040799Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040800Third Party AdvisoryVDB Entry
- https://support.f5.com/csp/article/K37442533Vendor Advisory
FAQ
What is CVE-2018-5516?
CVE-2018-5516 is a vulnerability with a CVSS score of 4.7 (MEDIUM). On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0...
How severe is CVE-2018-5516?
CVE-2018-5516 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-5516?
Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Local Traffic Manager, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Access Policy Manager.