Skip to content
OpenAdvisories
Unscored CVE-2018-5520 EUVD-2018-17289GHSA-9pmr-j55p-8757

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell (tmsh) may allow a…

Published May 2, 2018 · Updated Sep 16, 2024 · Assigned by f5

Description

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell (tmsh) may allow an administrative user to use the dig utility to gain unauthorized access to file system resources.

Affected products

VendorProductAffectedFixed
F5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, 11.2.1-11.6.3.1 —

References