On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: f5

Published: 2018-05-02T13:00:00Z

Updated: 2024-09-17T02:41:51.080Z

Reserved: 2018-01-12T00:00:00

Link: CVE-2018-5516

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-05-02T13:29:00.617

Modified: 2019-10-03T00:03:26.223

Link: CVE-2018-5516

cve-icon Redhat

No data.