CVE-2018-5516

CVE-2018-5516 affects F5 BIG-IP and related products where authenticated TMOS Shell (tmsh) access allows exfiltration of filesystem objects restricted by tmsh. Affected lines include BIG-IP versions 11.x–16.x, Enterprise Manager 3.x, BIG-IQ 4–7.x, and F5 iWorkflow 2.x. Root cause: tmsh restrictio...

CVE-2018-5540

CVE-2018-5540 affects F5 BIG-IP family where the big3d process does not irrevocably minimize group privileges at startup. The F5 advisory K82038789 lists vulnerable lines and fixed versions: BIG-IP DNS/GTM 13.x: upgrade to 13.1.0; 12.x: upgrade to 12.1.3.4; 11.x: upgrade to 11.6.3.2 (11.6.0-11.6....