Vulnerability in F5 Big-Ip Access Policy Manager
CVE-2018-5516
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.003 (22.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 23rd percentile — 22.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: -0.000
Affected products
- F5 Big-Ip Access Policy Manager
- F5 Big-Ip Advanced Firewall Manager
- F5 Big-Ip Analytics
- F5 Big-Ip Application Acceleration Manager
- F5 Big-Ip Application Security Manager
- F5 Big-Ip Domain Name System
- F5 Big-Ip Edge Gateway
- F5 Big-Ip Enterprise Manager — versions 3.1.1
- F5 Big-Ip Global Traffic Manager
- F5 Big-Ip Link Controller
Weakness classification (CWE)
References
- support.f5.com/csp/article/K37442533 (Vendor Advisory)
- www.securitytracker.com/id/1040800 (VDB Entry, Third Party Advisory, vdb-entry)
- www.securitytracker.com/id/1040799 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-5516?
- CVE-2018-5516 is a medium-severity vulnerability in F5 Big-Ip Access Policy Manager, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 4.7/10. Published 2018-05-02.
- How severe is CVE-2018-5516?
- Medium severity. CVSS v3 base score is 4.7 out of 10.