K53620021 : BIG-IP vulnerability CVE-2018-15333

Security Advisory Description

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system’s user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps. (CVE-2018-15333)

Impact

When sensitive information is included in the QKView or TCPDump files, the unrestricted snapshot file access may leak sensitive information to an unprivileged user.