VulnerabilityModified

CVE-2018-5516

MEDIUM 4.7EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.

CVSS 3.0: 4.7 MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.32% probability · 24th percentile
CISA KEV: Not listed
Weakness: CWE-732
Affected: f5/big-ip local traffic manager · f5/big-ip application acceleration manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip access policy manager · f5/big-ip application security manager · f5/big-ip edge gateway · f5/big-ip global traffic manager · f5/big-ip link controller · f5/big-ip policy enforcement manager · f5/big-ip webaccelerator · f5/big-ip websafe · f5/big-ip domain name system · f5/big-ip enterprise manager · f5/big-iq centralized management · f5/big-iq cloud and orchestration · f5/f5 iworkflow
Source: f5sirt@f5.com

References

http://www.securitytracker.com/id/1040799Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040800Third Party Advisory, VDB Entry
https://support.f5.com/csp/article/K37442533Vendor Advisory
http://www.securitytracker.com/id/1040799Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040800Third Party Advisory, VDB Entry
https://support.f5.com/csp/article/K37442533Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.