Access Control Issue in F5 BIG-IP and Enterprise Manager
CVE-2018-5523

7.2HIGH

Key Information:

Vendor: F5
Status: Big-ip (ltm, Aam, Afm, Analytics, Apm, Asm, Dns, Edge Gateway, Fps, Gtm, Link Controller, Pem, Webaccelerator); Enterprise Manager
Vendor: CVE Published:; 1 June 2018

What is CVE-2018-5523?

In specific versions of F5 BIG-IP and Enterprise Manager, an access control vulnerability exists which could allow authenticated administrators bypass certain restrictions when using the Traffic Management User Interface (TMUI). This flaw may result in unintended command execution, potentially compromising the integrity and security of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, 11.2.1

Enterprise Manager 3.1.1