CVE-2018-5511

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.

Affected products

F5 Big-Ip, Vmware Workstation

f5 Big-ip Local Traffic Manager

= 13.0.0, 13.1.0

Fix

Available

CVSS 3.0

7.2 HIGH

EPSS

14.5% (96th percentile)

Weakness

CWE-470

NVD status

Modified

Published

2018-04-13