cveboard RSS feed

CVE-2018-5516

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)

Vendor
F5 Networks, Inc.
Product
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)
Platforms
Unknown
Default status
Unknown
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
13.0.0-13.1.0.5affectedUnavailableUnavailableUnavailableNone listed
12.1.0-12.1.2affectedUnavailableUnavailableUnavailableNone listed
11.2.1-11.6.3.1affectedUnavailableUnavailableUnavailableNone listed

Enterprise Manager

Vendor
F5 Networks, Inc.
Product
Enterprise Manager
Platforms
Unknown
Default status
Unknown
Enterprise Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.1.1affectedUnavailableUnavailableUnavailableNone listed

BIG-IQ Centralized Management

Vendor
F5 Networks, Inc.
Product
BIG-IQ Centralized Management
Platforms
Unknown
Default status
Unknown
BIG-IQ Centralized Management · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.0.0-5.4.0affectedUnavailableUnavailableUnavailableNone listed
4.6.0affectedUnavailableUnavailableUnavailableNone listed

BIG-IQ Cloud and Orchestration

Vendor
F5 Networks, Inc.
Product
BIG-IQ Cloud and Orchestration
Platforms
Unknown
Default status
Unknown
BIG-IQ Cloud and Orchestration · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0affectedUnavailableUnavailableUnavailableNone listed

iWorkflow

Vendor
F5 Networks, Inc.
Product
iWorkflow
Platforms
Unknown
Default status
Unknown
iWorkflow · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.0.2-2.3.0affectedUnavailableUnavailableUnavailableNone listed