F5 BIG-IP CVE-2018-15333 Arbitrary File Access Vulnerability

Bugtraq ID:	106380
Class:	Design Error
CVE:	CVE-2018-15333
Remote:	Yes
Local:	No
Published:	Dec 28 2018 12:00AM
Updated:	Dec 28 2018 12:00AM
Credit:	Ismael Goncalves
Vulnerable:	F5 BIG-IP WebAccelerator 14.1 F5 BIG-IP WebAccelerator 14.0 F5 BIG-IP WebAccelerator 13.1.1 F5 BIG-IP WebAccelerator 13.1 F5 BIG-IP WebAccelerator 13.0.1 F5 BIG-IP WebAccelerator 13.0 F5 BIG-IP WebAccelerator 12.1.4 F5 BIG-IP WebAccelerator 12.1.3 F5 BIG-IP WebAccelerator 12.1.2 F5 BIG-IP WebAccelerator 12.1.1 F5 BIG-IP WebAccelerator 11.6.3 F5 BIG-IP WebAccelerator 11.6.2 F5 BIG-IP WebAccelerator 11.6 F5 BIG-IP WebAccelerator 11.5.6 F5 BIG-IP WebAccelerator 11.5.5 F5 BIG-IP WebAccelerator 11.5.1 F5 BIG-IP WebAccelerator 11.5 F5 BIG-IP WebAccelerator 11.3 F5 BIG-IP WebAccelerator 11.2.1 F5 BIG-IP PEM 14.1 F5 BIG-IP PEM 14.0 F5 BIG-IP PEM 13.1.1 F5 BIG-IP PEM 13.1 F5 BIG-IP PEM 13.0.1 F5 BIG-IP PEM 12.1.4 F5 BIG-IP PEM 12.1.3 F5 BIG-IP PEM 12.1.2 F5 BIG-IP PEM 12.1.1 F5 BIG-IP PEM 11.6.3 F5 BIG-IP PEM 11.6.2 F5 BIG-IP PEM 11.6.1 F5 BIG-IP PEM 11.5.6 F5 BIG-IP PEM 11.5.3 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5 F5 BIG-IP PEM 11.4 F5 BIG-IP PEM 11.3 F5 BIG-IP PEM 11.2.1 F5 BIG-IP PEM 12.1.0 F5 BIG-IP PEM 11.6.0 F5 BIG-IP PEM 11.5.5 F5 BIG-IP PEM 11.5.4 F5 BIG-IP PEM 11.4.1 F5 BIG-IP LTM 14.1 F5 BIG-IP LTM 14.0 F5 BIG-IP LTM 13.1.1 F5 BIG-IP LTM 13.1 F5 BIG-IP LTM 13.0.1 F5 BIG-IP LTM 13.0 F5 BIG-IP LTM 12.1.4 F5 BIG-IP LTM 12.1.3 F5 BIG-IP LTM 12.1.2 F5 BIG-IP LTM 12.1.1 F5 BIG-IP LTM 11.6.3 F5 BIG-IP LTM 11.6.2 F5 BIG-IP LTM 11.6.1 F5 BIG-IP LTM 11.5.6 F5 BIG-IP LTM 11.5.5 F5 BIG-IP LTM 11.5.3 F5 BIG-IP LTM 11.5.2 F5 BIG-IP LTM 11.5.1 F5 BIG-IP LTM 11.5 F5 BIG-IP LTM 11.4 F5 BIG-IP LTM 12.1.0 F5 BIG-IP LTM 11.6.0 F5 BIG-IP LTM 11.5.4 F5 BIG-IP LTM 11.4.1 F5 BIG-IP LTM 11.3.0 F5 BIG-IP LTM 11.2.1 F5 BIG-IP Link Controller 14.1 F5 BIG-IP Link Controller 14.0 F5 BIG-IP Link Controller 13.1.1 F5 BIG-IP Link Controller 13.1 F5 BIG-IP Link Controller 13.0.1 F5 BIG-IP Link Controller 13.0 F5 BIG-IP Link Controller 12.1.4 F5 BIG-IP Link Controller 12.1.3 F5 BIG-IP Link Controller 12.1.2 F5 BIG-IP Link Controller 12.1.1 F5 BIG-IP Link Controller 11.6.3 F5 BIG-IP Link Controller 11.6 F5 BIG-IP Link Controller 11.5.6 F5 BIG-IP Link Controller 11.5.3 F5 BIG-IP Link Controller 11.5.2 F5 BIG-IP Link Controller 11.5.1 F5 BIG-IP Link Controller 11.5 F5 BIG-IP Link Controller 11.4 F5 BIG-IP Link Controller 11.3 F5 BIG-IP Link Controller 11.2.1 F5 BIG-IP Link Controller 12.1.0 F5 BIG-IP Link Controller 11.6.2 F5 BIG-IP Link Controller 11.6.1 F5 BIG-IP Link Controller 11.5.5 F5 BIG-IP Link Controller 11.5.4 F5 BIG-IP Link Controller 11.4.1 F5 BIG-IP GTM 14.1 F5 BIG-IP GTM 14.0 F5 BIG-IP GTM 13.1.1 F5 BIG-IP GTM 13.1 F5 BIG-IP GTM 13.0.1 F5 BIG-IP GTM 12.1.4 F5 BIG-IP GTM 12.1.3 F5 BIG-IP GTM 12.1.2 F5 BIG-IP GTM 12.1.1 F5 BIG-IP GTM 12.1 F5 BIG-IP GTM 11.6.3 F5 BIG-IP GTM 11.6.2 F5 BIG-IP GTM 11.6.1 F5 BIG-IP GTM 11.5.7 F5 BIG-IP GTM 11.5.6 F5 BIG-IP GTM 11.5.3 F5 BIG-IP GTM 11.5.2 F5 BIG-IP GTM 11.5.1 F5 BIG-IP GTM 11.5 F5 BIG-IP GTM 11.4 F5 BIG-IP GTM 11.3 F5 BIG-IP GTM 13.0.0 F5 BIG-IP GTM 11.6.0 F5 BIG-IP GTM 11.5.5 F5 BIG-IP GTM 11.5.4 F5 BIG-IP GTM 11.4.1 F5 BIG-IP GTM 11.2.1 F5 BIG-IP FPS 14.1 F5 BIG-IP FPS 14.0 F5 BIG-IP FPS 13.1.1 F5 BIG-IP FPS 13.1 F5 BIG-IP FPS 13.0.1 F5 BIG-IP FPS 13.0 F5 BIG-IP FPS 12.1.3 F5 BIG-IP FPS 12.1.2 F5 BIG-IP FPS 12.1.1 F5 BIG-IP FPS 12.1 F5 BIG-IP FPS 11.6.3 F5 BIG-IP FPS 11.6.1 F5 BIG-IP FPS 11.5.7 F5 BIG-IP FPS 11.5.1 F5 BIG-IP FPS 11.3.1 F5 BIG-IP FPS 11.2.1 F5 BIG-IP Edge Gateway 14.1 F5 BIG-IP Edge Gateway 14.0 F5 BIG-IP Edge Gateway 13.1.1 F5 BIG-IP Edge Gateway 13.1 F5 BIG-IP Edge Gateway 13.0.1 F5 BIG-IP Edge Gateway 12.1.3 F5 BIG-IP Edge Gateway 12.1.2 F5 BIG-IP Edge Gateway 12.1 F5 BIG-IP Edge Gateway 11.6.2 F5 BIG-IP Edge Gateway 11.5.7 F5 BIG-IP Edge Gateway 11.5.6 F5 BIG-IP Edge Gateway 11.5.1 F5 BIG-IP Edge Gateway 11.5 F5 BIG-IP Edge Gateway 11.3 F5 BIG-IP Edge Gateway 13.0 F5 BIG-IP Edge Gateway 11.4.1 F5 BIG-IP Edge Gateway 11.2.1 F5 BIG-IP DNS 14.1 F5 BIG-IP DNS 14.0 F5 BIG-IP DNS 13.1.1 F5 BIG-IP DNS 13.1 F5 BIG-IP DNS 13.0.1 F5 BIG-IP DNS 13.0 F5 BIG-IP DNS 12.1.4 F5 BIG-IP DNS 12.1.3 F5 BIG-IP DNS 12.1.2 F5 BIG-IP DNS 12.1.1 F5 BIG-IP DNS 11.6.3 F5 BIG-IP DNS 11.6.2 F5 BIG-IP DNS 11.6.1 F5 BIG-IP DNS 11.6 F5 BIG-IP DNS 11.5.7 F5 BIG-IP DNS 11.5.6 F5 BIG-IP DNS 11.5.5 F5 BIG-IP DNS 11.5.4 F5 BIG-IP DNS 11.5.3 F5 BIG-IP DNS 11.5.2 F5 BIG-IP DNS 11.5.1 F5 BIG-IP DNS 11.5 F5 BIG-IP DNS 11.2.1 F5 BIG-IP DNS 12.1.0 F5 BIG-IP ASM 14.1 F5 BIG-IP ASM 14.0 F5 BIG-IP ASM 13.1.1 F5 BIG-IP ASM 13.1 F5 BIG-IP ASM 13.0.1 F5 BIG-IP ASM 13.0 F5 BIG-IP ASM 12.1.4 F5 BIG-IP ASM 12.1.3 F5 BIG-IP ASM 12.1.2 F5 BIG-IP ASM 12.1.1 F5 BIG-IP ASM 11.6.3 F5 BIG-IP ASM 11.6.2 F5 BIG-IP ASM 11.6.1 F5 BIG-IP ASM 11.5.7 F5 BIG-IP ASM 11.5.6 F5 BIG-IP ASM 11.5.3 F5 BIG-IP ASM 11.5.2 F5 BIG-IP ASM 11.5.1 F5 BIG-IP ASM 11.5 F5 BIG-IP ASM 11.4 F5 BIG-IP ASM 12.1.0 F5 BIG-IP ASM 11.6.0 F5 BIG-IP ASM 11.5.5 F5 BIG-IP ASM 11.5.4 F5 BIG-IP ASM 11.4.1 F5 BIG-IP ASM 11.3 F5 BIG-IP ASM 11.2.1 F5 BIG-IP APM 14.1 F5 BIG-IP APM 14.0 F5 BIG-IP APM 13.1.1 F5 BIG-IP APM 13.1 F5 BIG-IP APM 13.0.1 F5 BIG-IP APM 13.0 F5 BIG-IP APM 12.1.4 F5 BIG-IP APM 12.1.3 F5 BIG-IP APM 12.1.2 F5 BIG-IP APM 12.1.1 F5 BIG-IP APM 11.6.3 F5 BIG-IP APM 11.6.2 F5 BIG-IP APM 11.6.1 F5 BIG-IP APM 11.5.6 F5 BIG-IP APM 11.5.5 F5 BIG-IP APM 11.5.3 F5 BIG-IP APM 11.5.2 F5 BIG-IP APM 11.5.1 F5 BIG-IP APM 12.1.0 F5 BIG-IP APM 11.6.0 F5 BIG-IP APM 11.5.4 F5 BIG-IP APM 11.5.0 F5 BIG-IP APM 11.4.1 F5 BIG-IP APM 11.4.0 F5 BIG-IP APM 11.3.0 F5 BIG-IP APM 11.2.1 F5 BIG-IP Analytics 14.1 F5 BIG-IP Analytics 14.0 F5 BIG-IP Analytics 13.1.1 F5 BIG-IP Analytics 13.1 F5 BIG-IP Analytics 13.0 F5 BIG-IP Analytics 12.1.4 F5 BIG-IP Analytics 12.1.3 F5 BIG-IP Analytics 12.1.2 F5 BIG-IP Analytics 12.1.1 F5 BIG-IP Analytics 11.6.3 F5 BIG-IP Analytics 11.6.2 F5 BIG-IP Analytics 11.6.1 F5 BIG-IP Analytics 11.5.6 F5 BIG-IP Analytics 11.5.3 F5 BIG-IP Analytics 11.5.2 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.5 F5 BIG-IP Analytics 11.4 F5 BIG-IP Analytics 11.3 F5 BIG-IP Analytics 11.2.1 F5 BIG-IP Analytics 12.1.0 F5 BIG-IP Analytics 11.6.0 F5 BIG-IP Analytics 11.5.5 F5 BIG-IP Analytics 11.5.4 F5 BIG-IP Analytics 11.4.1 F5 BIG-IP AFM 14.1 F5 BIG-IP AFM 14.0 F5 BIG-IP AFM 13.1.1 F5 BIG-IP AFM 13.1 F5 BIG-IP AFM 13.0.1 F5 BIG-IP AFM 13.0 F5 BIG-IP AFM 12.1.4 F5 BIG-IP AFM 12.1.3 F5 BIG-IP AFM 12.1.2 F5 BIG-IP AFM 12.1.1 F5 BIG-IP AFM 11.6.3 F5 BIG-IP AFM 11.6.1 F5 BIG-IP AFM 11.5.3 F5 BIG-IP AFM 11.5.2 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.5 F5 BIG-IP AFM 11.4 F5 BIG-IP AFM 11.3 F5 BIG-IP AFM 11.2.1 F5 BIG-IP AFM 12.1.0 F5 BIG-IP AFM 11.6.2 F5 BIG-IP AFM 11.5.5 F5 BIG-IP AFM 11.5.4 F5 BIG-IP AFM 11.4.1 F5 BIG-IP AAM 14.1 F5 BIG-IP AAM 14.0 F5 BIG-IP AAM 13.1.1 F5 BIG-IP AAM 13.1 F5 BIG-IP AAM 13.0.1 F5 BIG-IP AAM 13.0 F5 BIG-IP AAM 12.1.4 F5 BIG-IP AAM 12.1.3 F5 BIG-IP AAM 12.1.2 F5 BIG-IP AAM 12.1.1 F5 BIG-IP AAM 11.6.3 F5 BIG-IP AAM 11.6.2 F5 BIG-IP AAM 11.6.1 F5 BIG-IP AAM 11.5.6 F5 BIG-IP AAM 11.5.5 F5 BIG-IP AAM 11.5.3 F5 BIG-IP AAM 11.5.2 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5 F5 BIG-IP AAM 11.3 F5 BIG-IP AAM 11.2.1 F5 BIG-IP AAM 12.1.0 F5 BIG-IP AAM 11.6.0 F5 BIG-IP AAM 11.4.1 F5 BIG-IP AAM 11.4.0
Not Vulnerable:

F5 BIG-IP CVE-2018-15333 Arbitrary File Access Vulnerability

F5 BIG-IP is prone to an arbitrary file-access vulnerability.

An attacker can exploit this issue to retrieve or delete arbitrary files, which may aid in further attacks.

F5 BIG-IP CVE-2018-15333 Arbitrary File Access Vulnerability

References:

• F5 BIG-IP Homepage (F5)
  
• K53620021: BIG-IP vulnerability CVE-2018-15333 ()