CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 4.7
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: on f5 big-ip 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, enterprise manager 3.1.1, big-iq centralized management 5.0.0-5.4.0 or 4.6.0, big-iq cloud and orchestration 1.0.0, or f5 iworkflow 2.0.2-2.3.0, authenticated users granted tmos shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. this allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2018-05-02
Last Modified Date: 2019-10-03