Unrestricted Snapshot File Access in F5 BIG-IP Configuration Utility
CVE-2018-15333

5.5MEDIUM

Key Information:

Vendor: F5
Status: Big-ip (ltm, Aam, Afm, Analytics, Apm, Asm, Dns, Edge Gateway, Fps, Gtm, Link Controller, Pem, Webaccelerator)
Vendor: CVE Published:; 28 December 2018

What is CVE-2018-15333?

The F5 BIG-IP web application allows users with any role, including the guest role, to access and download sensitive snapshot files from the configuration utility. This includes files like QKView and TCPDumps, which may contain critical information about the system's configuration and operational data. If exploited, this vulnerability could lead to unauthorized disclosure of sensitive data, compromising the security and integrity of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch