CVE-2018-5525
published 2018-06-01CVE-2018-5525: A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that…
medium4.3CVSS 3.0
AVNACLPRLUINSUCLINAN
A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potentially sensitive customer data.
Affected
66 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | — | — |
| f5 | big-ip_access_policy_manager | 11.2.1 – 11.5.5 | — |
| f5 | big-ip_access_policy_manager | 11.6.0 – 11.6.3 | — |
| f5 | big-ip_access_policy_manager | >= 12.1.0 < 12.1.3 | 12.1.3 |
| f5 | big-ip_advanced_firewall_manager | — | — |
| f5 | big-ip_advanced_firewall_manager | 11.2.1 – 11.5.5 | — |
| f5 | big-ip_advanced_firewall_manager | 11.6.0 – 11.6.3 | — |
| f5 | big-ip_advanced_firewall_manager | >= 12.1.0 < 12.1.3 | 12.1.3 |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | 11.2.1 – 11.5.5 | — |
| f5 | big-ip_analytics | 11.6.0 – 11.6.3 | — |
| f5 | big-ip_analytics | >= 12.1.0 < 12.1.3 | 12.1.3 |
| f5 | big-ip_analytics | 13.1.0 – 13.1.0.4 | — |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_application_acceleration_manager | — | — |
| f5 | big-ip_application_acceleration_manager | 11.2.1 – 11.5.5 | — |
| f5 | big-ip_application_acceleration_manager | 11.6.0 – 11.6.3 | — |
| f5 | big-ip_application_acceleration_manager | >= 12.1.0 < 12.1.3 | 12.1.3 |
| f5 | big-ip_application_security_manager | — | — |
| f5 | big-ip_application_security_manager | 11.2.1 – 11.5.5 | — |
| f5 | big-ip_application_security_manager | 11.6.0 – 11.6.3 | — |
| f5 | big-ip_application_security_manager | >= 12.1.0 < 12.1.3 | 12.1.3 |