NetSight
IP …
medium4.3

CVE-2018-5525

A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that expo…

Impact

A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive customer data.

Affected products

VendorProductAffected versions
F5Big-Ip Application Acceleration Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Local Traffic Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Advanced Firewall Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Analytics
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Access Policy Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Application Security Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Domain Name System
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Edge Gateway
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Global Traffic Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Link Controller
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Policy Enforcement Manager
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0
F5Big-Ip Webaccelerator
from 11.2.1 through 11.5.5
from 11.6.0 through 11.6.3
from 12.1.0 before 12.1.3
Version 13.0.0

Weakness classification

CWE-200

References