K50254952 : BIG-IP Configuration utility vulnerability CVE-2018-5523

Security Advisory Description

When authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. (CVE-2018-5523)

Impact

BIG-IP and Enterprise Manager

This vulnerability allows a privilege escalation for authenticated administrative users.

BIG-IQ, F5 iWorkflow, ARX, LineRate, and Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.