cbcvebase.
CVE-2018-5525
published 2018-06-01

CVE-2018-5525: A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that…

PriorityP422medium4.3CVSS 3.0
AVNACLPRLUINSUCLINAN
EPSS
1.01%
59.1th percentile
A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive customer data.

Affected

66 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip_aam——
f5big-ip_access_policy_manager——
f5big-ip_access_policy_manager11.2.1 – 11.5.5—
f5big-ip_access_policy_manager11.6.0 – 11.6.3—
f5big-ip_access_policy_manager>= 12.1.0 < 12.1.312.1.3
f5big-ip_advanced_firewall_manager——
f5big-ip_advanced_firewall_manager11.2.1 – 11.5.5—
f5big-ip_advanced_firewall_manager11.6.0 – 11.6.3—
f5big-ip_advanced_firewall_manager>= 12.1.0 < 12.1.312.1.3
f5big-ip_afm——
f5big-ip_analytics——
f5big-ip_analytics——
f5big-ip_analytics11.2.1 – 11.5.5—
f5big-ip_analytics11.6.0 – 11.6.3—
f5big-ip_analytics>= 12.1.0 < 12.1.312.1.3
f5big-ip_analytics13.1.0 – 13.1.0.4—
f5big-ip_apm——
f5big-ip_application_acceleration_manager——
f5big-ip_application_acceleration_manager11.2.1 – 11.5.5—
f5big-ip_application_acceleration_manager11.6.0 – 11.6.3—
f5big-ip_application_acceleration_manager>= 12.1.0 < 12.1.312.1.3
f5big-ip_application_security_manager——
f5big-ip_application_security_manager11.2.1 – 11.5.5—
f5big-ip_application_security_manager11.6.0 – 11.6.3—
f5big-ip_application_security_manager>= 12.1.0 < 12.1.312.1.3

CVSS provenance

nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.