CVE-2018-5516

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.

• f5 big-ip local traffic manager (>= 11.2.1 <= 11.6.3) • f5 big-ip local traffic manager (>= 12.1.0 <= 12.1.2) • f5 big-ip local traffic manager (>= 13.0.0 <= 13.1.0) • f5 big-ip application acceleration manager (>= 11.2.1 <= 11.6.3) • f5 big-ip application acceleration manager (>= 12.1.0 <= 12.1.2) • f5 big-ip application acceleration manager (>= 13.0.0 <= 13.1.0) • f5 big-ip advanced firewall manager (>= 11.2.1 <= 11.6.3) • f5 big-ip advanced firewall manager (>= 12.1.0 <= 12.1.2) • f5 big-ip advanced firewall manager (>= 13.0.0 <= 13.1.0) • f5 big-ip analytics (>= 11.2.1 <= 11.6.3) • f5 big-ip analytics (>= 12.1.0 <= 12.1.2) • f5 big-ip analytics (>= 13.0.0 <= 13.1.0) • f5 big-ip access policy manager (>= 11.2.1 <= 11.6.3) • f5 big-ip access policy manager (>= 12.1.0 <= 12.1.2) • f5 big-ip access policy manager (>= 13.0.0 <= 13.1.0) • f5 big-ip application security manager (>= 11.2.1 <= 11.6.3) • f5 big-ip application security manager (>= 12.1.0 <= 12.1.2) • f5 big-ip application security manager (>= 13.0.0 <= 13.1.0) • f5 big-ip edge gateway (>= 11.2.1 <= 11.6.3) • f5 big-ip edge gateway (>= 12.1.0 <= 12.1.2) • f5 big-ip edge gateway (>= 13.0.0 <= 13.1.0) • f5 big-ip global traffic manager (>= 11.2.1 <= 11.6.3) • f5 big-ip global traffic manager (>= 12.1.0 <= 12.1.2) • f5 big-ip global traffic manager (>= 13.0.0 <= 13.1.0) • f5 big-ip link controller (>= 11.2.1 <= 11.6.3) • f5 big-ip link controller (>= 12.1.0 <= 12.1.2) • f5 big-ip link controller (>= 13.0.0 <= 13.1.0) • f5 big-ip policy enforcement manager (>= 11.2.1 <= 11.6.3) • f5 big-ip policy enforcement manager (>= 12.1.0 <= 12.1.2) • f5 big-ip policy enforcement manager (>= 13.0.0 <= 13.1.0) • f5 big-ip webaccelerator (>= 11.2.1 <= 11.6.3) • f5 big-ip webaccelerator (>= 12.1.0 <= 12.1.2) • f5 big-ip webaccelerator (>= 13.0.0 <= 13.1.0) • f5 big-ip websafe (>= 11.2.1 <= 11.6.3) • f5 big-ip websafe (>= 12.1.0 <= 12.1.2) • f5 big-ip websafe (>= 13.0.0 <= 13.1.0) • f5 big-ip domain name system (>= 11.2.1 <= 11.6.3) • f5 big-ip domain name system (>= 12.1.0 <= 12.1.2) • f5 big-ip domain name system (>= 13.0.0 <= 13.1.0) • f5 big-ip enterprise manager 3.1.1 • f5 big-iq centralized management (>= 5.0.0 <= 5.4.0) • f5 big-iq centralized management 4.6.0 • f5 big-iq cloud and orchestration 1.0.0 • f5 f5 iworkflow (>= 2.0.2 <= 2.3.0)