CVE-2018-5519

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write…

published May 2, 2018

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access (for example, any user when licensed for Appliance Mode), this allows more permissive file access than intended.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00983 · 61.7th percentile
Published
2018-05-02T13:00Z
EPSS history
Timeline
  • 02 MAY 13:00Z
    On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write…
    cvelistv5