cvedb.io
CVE-2018-5519
MEDIUM · CVSS 4.9
EPSS exploitation probability: 0%
Published 2018-05-02T13:29:00.803 · Last modified 2026-06-17T02:00:27.393

Summary

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access (for example, any user when licensed for Appliance Mode), this allows more permissive file access than intended.

Affected products

f5 — big-ip_local_traffic_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when f5 ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.