{"id":"CVE-2018-5516","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5516","generatedAt":"2026-10-28T22:13:50.038Z","title":"On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell…","description":"On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.","published":"2018-05-02T13:29:01.000Z","lastModified":"2026-06-17T02:00:27.000Z","status":"Modified","sourceIdentifier":"f5sirt@f5.com","cvss":{"version":"3.0","score":4.7,"severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-732"],"affected":["f5/big-ip local traffic manager","f5/big-ip application acceleration manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip access policy manager","f5/big-ip application security manager","f5/big-ip edge gateway","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip policy enforcement manager","f5/big-ip webaccelerator","f5/big-ip websafe","f5/big-ip domain name system","f5/big-ip enterprise manager","f5/big-iq centralized management","f5/big-iq cloud and orchestration","f5/f5 iworkflow"],"epss":{"score":0.00309,"percentile":0.23554,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securitytracker.com/id/1040799","tags":["Third Party Advisory","VDB Entry"],"source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1040800","tags":["Third Party Advisory","VDB Entry"],"source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K37442533","tags":["Vendor Advisory"],"source":"f5sirt@f5.com"},{"url":"http://www.securitytracker.com/id/1040799","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1040800","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K37442533","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5516","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}