high7.2Public exploit code

CVE-2018-5511

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

VMware Workstation 14.1.5 / VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation2019-03-25 · local · windows · Verified

Impact

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.

Affected products

Vendor	Product	Affected versions
F5	Big-Ip Local Traffic Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Application Acceleration Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Advanced Firewall Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Analytics	Versions 13.0.0, 13.1.0
F5	Big-Ip Access Policy Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Application Security Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Edge Gateway	Versions 13.0.0, 13.1.0
F5	Big-Ip Global Traffic Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Link Controller	Versions 13.0.0, 13.1.0
F5	Big-Ip Policy Enforcement Manager	Versions 13.0.0, 13.1.0
F5	Big-Ip Webaccelerator	Versions 13.0.0, 13.1.0
F5	Big-Ip Websafe	Versions 13.0.0, 13.1.0

Weakness classification

CWE-470

Public exploit code

Impact

Affected products

Weakness classification

References