CVE-2018-5519
MEDIUM
4.9
CVSS Severity Score
Vulnerability Description
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access (for example, any user when licensed for Appliance Mode), this allows more permissive file access than intended.
Affected Platforms (CPE)
📦
F5
Big Ip Local Traffic Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Local Traffic Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Local Traffic Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Application Acceleration Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Application Acceleration Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Application Acceleration Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Advanced Firewall Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Advanced Firewall Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Advanced Firewall Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Analytics
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Analytics
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Analytics
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Access Policy Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Access Policy Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Access Policy Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Application Security Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Application Security Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Application Security Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Edge Gateway
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Edge Gateway
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Edge Gateway
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Global Traffic Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Global Traffic Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Global Traffic Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Link Controller
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Link Controller
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Link Controller
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Policy Enforcement Manager
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Policy Enforcement Manager
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Policy Enforcement Manager
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Webaccelerator
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Webaccelerator
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Webaccelerator
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Websafe
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Websafe
>= 12.1.0 and <= 12.1.3📦
F5
Big Ip Websafe
>= 13.0.0 and <= 13.1.0📦
F5
Big Ip Domain Name System
>= 11.2.1 and <= 11.6.3📦
F5
Big Ip Domain Name System
>= 12.1.0 and <= 12.1.3📦
F5