CVE-2018-5540

On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up.
References
Link Resource
http://www.securityfocus.com/bid/104920 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041340 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041341 Third Party Advisory VDB Entry
https://support.f5.com/csp/article/K82038789 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*

Configuration 6 (hide)

cpe:2.3:a:f5:f5_iworkflow:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-07-19 14:29

Updated : 2024-02-28 16:48


NVD link : CVE-2018-5540

Mitre link : CVE-2018-5540

CVE.ORG link : CVE-2018-5540


JSON object : View

Products Affected

f5

  • f5_iworkflow
  • enterprise_manager
  • big-iq_centralized_management
  • big-ip_global_traffic_manager
  • big-iq_cloud_and_orchestration
  • big-ip_domain_name_system
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource