PT-2018-17014
CVE-2018-5520
·
تاريخ النشر
2018-05-02
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 11.2.1 through 11.6.3.1
F5 BIG-IP versions 12.1.0 through 12.1.3.1
F5 BIG-IP versions 13.0.0 through 13.1.0.5
Description
The issue allows an administrative user to gain unauthorized access to file system resources using the dig utility in the TMOS Shell (tmsh) on systems configured in Appliance mode.
Recommendations
For F5 BIG-IP versions 11.2.1 through 11.6.3.1, restrict access to the tmsh utility to minimize the risk of exploitation.
For F5 BIG-IP versions 12.1.0 through 12.1.3.1, consider disabling the dig utility in the TMOS Shell until a fix is available.
For F5 BIG-IP versions 13.0.0 through 13.1.0.5, limit the use of the tmsh utility to only necessary administrative tasks to reduce the risk of unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾