F5 Networks BIG-IP : TMOS Shell vulnerability (K21711352)

Authenticated users granted TMOS Shell tmsh privileges can access objects on the file system, which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system, which would not normally be allowed. CVE-2019-19151...

F5 Networks BIG-IP : TMOS vulnerability (K03126093)

On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices. CVE-2019-6664 Impact BIG-IP The defaultfirewall rules for the management interface are not reliably reinstalled after first boot. As a result, the...

CVE-2019-19151

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell tmsh privileges are able access object...

Information disclosure

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell tmsh privileges are able access object...

F5 Networks BIG-IP : BIG-IP Appliance mode vulnerability (K11330536)

When the BIG-IP system is licensed for Appliance mode, a user with either the Administrator or the Resource Administrator rolecan bypass Appliance mode restrictions.CVE-2019-6635 Impact BIG-IP This vulnerability allows local attackers with high-level privileges to overwrite arbitrary files. This...

F5 Networks BIG-IP : BIG-IP Appliance mode vulnerability (K73522927)

When the BIG-IP system is licensed with Appliance mode, user accounts with Administrator and Resource Administrator roles can bypass Appliance mode restrictions. CVE-2019-6633 Impact This vulnerability allows the attacker to exploit the system with high-level privileges to read and modify the...

Authentication flaw

In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files via scp, for example can escalate their privileges to allow root shell...

F5 Networks BIG-IP : Appliance mode tmsh access vulnerability (K02043709)

On a BIG-IP system configured in Appliance mode, the TMOS Shell tmsh may allow an administrative user to use the dig utility to gain unauthorized access to file system resources. CVE-2018-5520 Note : Appliance mode is designed to meet the needs of customers in especially sensitive sectors by...

F5 Networks BIG-IP : TMOS Shell vulnerability (K37442533)

Authenticated users granted TMOS Shell tmsh access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed. CVE-2018-5516 Impact This...

F5 Networks BIG-IP : BIG-IP tmsh vulnerability (K01067037)

When BIG-IP is licensed for Appliance mode, Admin and Resource administrator roles can by-pass BIG-IP Appliance mode restrictions to overwrite critical system files. CVE-2018-15321 Attackers with ahigh-privilege level can overwrite critical system files, which in turnbypasses security controls...

F5 Networks BIG-IP : TMOS vulnerability (K49440608)

When a specifically configured virtual server receives traffic of an undisclosed nature, the Traffic Management Microkernel TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration that exposes this issue is not common and in general does...

Design/Logic Flaw

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell tmsh may allow an administrative user to use the dig utility to gain unauthorized access to file system resources...

CVE-2018-5520

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell tmsh may allow an administrative user to use the dig utility to gain unauthorized access to file system resources...

CVE-2018-5516

CVE-2018-5516 affects F5 BIG-IP and related products where authenticated TMOS Shell (tmsh) access allows exfiltration of filesystem objects restricted by tmsh. Affected lines include BIG-IP versions 11.x–16.x, Enterprise Manager 3.x, BIG-IQ 4–7.x, and F5 iWorkflow 2.x. Root cause: tmsh restrictio...

CVE-2018-5520

CVE-2018-5520 affects F5 BIG-IP in Appliance mode where the TMOS Shell (tmsh) can be exploited via the dig utility to access file-system resources. The vulnerability allows unauthorized disclosure of information. Affected product scope includes BIG-IP versions: 11.x (11.2.1–11.6.3.1), 12.x (12.1....

Multiple F5 Products TMOS Shell Information Disclosure Vulnerability

F5 BIG-IP LTM and others are products of F5 Corporation, USA.F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager.TMOS Shell tmsh is one of the command line tools. A security vulnerability exists in the TMOS Shell in several F5 products. An attacker could...

Multiple F5 Products TMOS Shell Privilege Gain Vulnerability

F5 BIG-IP LTM and others are products of F5 Corporation, USA.F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager.TMOS Shell tmsh is one of the command line tools. A security vulnerability exists in the TMOS Shell in several F5 products. An attacker could...

CVE-2016-5024

Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service Traffic Management Microkernel restart via crafted network traffic...

F5 Networks BIG-IP : TMOS vulnerability: Password changes for local users may not be preserved unless the configuration is explicitly saved (K37250780)

When changing local user passwords at first boot, the password update may not be preserved unless the configuration is explicitly saved. This will leave the system in a state where it still accepts the old password, and the new password cannot be used to log in. This vulnerability occurs when all...

SOL37250780 - TMOS vulnerability: Password changes for local users may not be preserved unless the configuration is explicitly saved

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...