Lucene search
K

CVE-2018-5516

🗓️ 02 May 2018 13:00:00Reported by f5Type 
cvelist
 cvelist
🔗 www.cve.org👁 35 Views

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users with tmsh access can exfiltrate disallowed files

Related
Affected
Refs
ReporterTitlePublishedViews
Family
CNVD
Multiple F5 Products TMOS Shell Information Disclosure Vulnerability
2 May 201800:00
cnvd
CVE
CVE-2018-5516
2 May 201813:00
cve
EUVD
EUVD-2018-17285
7 Oct 202500:30
euvd
F5 Networks
K37442533: TMOS Shell vulnerability CVE-2018-5516
21 Feb 202318:59
f5
Tenable Nessus
F5 Networks BIG-IP : TMOS Shell vulnerability (K21711352)
1 May 202000:00
nessus
Tenable Nessus
F5 Networks BIG-IP : TMOS Shell vulnerability (K37442533)
2 Nov 201800:00
nessus
NVD
CVE-2018-5516
2 May 201813:29
nvd
OSV
CVE-2018-5516
2 May 201813:29
osv
Prion
Code injection
2 May 201813:29
prion
[
  {
    "product": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "13.0.0-13.1.0.5"
      },
      {
        "status": "affected",
        "version": "12.1.0-12.1.2"
      },
      {
        "status": "affected",
        "version": "11.2.1-11.6.3.1"
      }
    ]
  },
  {
    "product": "Enterprise Manager",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "3.1.1"
      }
    ]
  },
  {
    "product": "BIG-IQ Centralized Management",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0-5.4.0"
      },
      {
        "status": "affected",
        "version": "4.6.0"
      }
    ]
  },
  {
    "product": "BIG-IQ Cloud and Orchestration",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0"
      }
    ]
  },
  {
    "product": "iWorkflow",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.2-2.3.0"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 May 2018 09:57Current
4.7Medium risk
Vulners AI Score4.7
EPSS0.00115
35