K36814487 : BIG-IP tmsh vulnerability CVE-2020-5858

Security Advisory Description

Users with non-administrator roles (for example, Guest or Resource Administrator) with TMOS Shell (tmsh) access can run arbitrary commands with elevated privilege using a crafted**tmsh **command. (CVE-2020-5858)

Impact

BIG-IP and BIG-IQ

This vulnerability allows unauthorized privileges to authenticated non-administrator users who have tmsh access.

Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.