Skip to content

CVE-2018-5540 On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkfl...

MediumCVSS 4.4 EPSS 0.41%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up.

Affected products

ProductAffected versionsFixed in
f5 big-ip domain name system >= 11.5.1, <= 11.5.6 No fix listed
f5 big-ip domain name system >= 11.6.0, <= 11.6.3.1 No fix listed
f5 big-ip domain name system >= 12.1.0, <= 12.1.3.3 No fix listed
f5 big-ip domain name system >= 13.0.0, <= 13.0.1 No fix listed
f5 big-ip global traffic manager >= 11.5.1, <= 11.5.6 No fix listed
f5 big-ip global traffic manager >= 11.6.0, <= 11.6.3.1 No fix listed
f5 big-ip global traffic manager >= 12.1.0, <= 12.1.3.3 No fix listed
f5 big-ip global traffic manager >= 13.0.0, <= 13.0.1 No fix listed
f5 enterprise manager = 3.1.1 No fix listed
f5 big-iq centralized management >= 5.0.0, <= 5.1.0 No fix listed
f5 big-iq cloud and orchestration = 1.0.0 No fix listed
f5 iworkflow >= 2.1.0, <= 2.3.0 No fix listed
f5 BIG-IP (DNS, GTM) = 13.0.0-13.0.1 No fix listed
f5 BIG-IP (DNS, GTM) = 12.1.0-12.1.3.3 No fix listed
f5 BIG-IP (DNS, GTM) = 11.6.0-11.6.3.1 No fix listed
f5 BIG-IP (DNS, GTM) = 11.5.1-11.5.6 No fix listed
f5 big-iq centralized management = 5.0.0-5.1.0 No fix listed
f5 iworkflow = 2.1.0-2.3.0 No fix listed

References