2 lines
6.4 KiB
JSON
2 lines
6.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"BIG-IP (DNS, GTM)","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"13.0.0-13.0.1"},{"status":"affected","version":"12.1.0-12.1.3.3"},{"status":"affected","version":"11.6.0-11.6.3.1"},{"status":"affected","version":"11.5.1-11.5.6"}]},{"product":"Enterprise Manager","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"3.1.1"}]},{"product":"BIG-IQ Centralized Management","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"5.0.0-5.1.0"}]},{"product":"BIG-IQ Cloud and Orchestration","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"1.0.0"}]},{"product":"F5 iWorkflow","vendor":"F5 Networks, Inc.","versions":[{"status":"affected","version":"2.1.0-2.3.0"}]}],"source":"f5sirt@f5.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"B719583F-D2FE-4F29-9FC2-613F979737E6","versionEndIncluding":"11.5.6","versionStartIncluding":"11.5.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"A17594BD-C3CF-441F-82E3-FB98A0606845","versionEndIncluding":"11.6.3.1","versionStartIncluding":"11.6.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"D4592661-3ADE-447E-90E9-8B02B9FFC952","versionEndIncluding":"12.1.3.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*","matchCriteriaId":"332B12F5-543D-450C-AEED-19BECC56CF13","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"B9F34B4F-BA2F-45D9-B2EB-B9196BD6CDF7","versionEndIncluding":"11.5.6","versionStartIncluding":"11.5.1","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"EC942249-E5D9-4CB1-A6D4-40333C20F561","versionEndIncluding":"11.6.3.1","versionStartIncluding":"11.6.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"A26916E3-9C93-4BB1-BF28-3D1C6BBA78BE","versionEndIncluding":"12.1.3.3","versionStartIncluding":"12.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5A2564C2-BD67-4DDE-A122-74F7E6C22318","versionEndIncluding":"13.0.1","versionStartIncluding":"13.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D5F5FEE7-059A-4A9B-BCCD-18F0AA435040","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*","matchCriteriaId":"311994A3-8C3E-46C2-A971-7100DFBD82D9","versionEndIncluding":"5.1.0","versionStartIncluding":"5.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E21D6206-4716-47FE-A733-F18343656E94","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:f5:f5_iworkflow:*:*:*:*:*:*:*:*","matchCriteriaId":"698761C4-9108-4EF9-81C1-4886E09D2211","versionEndIncluding":"2.3.0","versionStartIncluding":"2.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up."},{"lang":"es","value":"En F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1 o 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0 o F5 iWorkflow 2.1.0-2.3.0, el proceso big3d no no minimiza irrevocablemente los privilegios de grupo al arranque."}],"id":"CVE-2018-5540","lastModified":"2026-06-17T02:00:29.823","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.4,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":0.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-07-19T14:29:00.730","references":[{"source":"f5sirt@f5.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/104920"},{"source":"f5sirt@f5.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041340"},{"source":"f5sirt@f5.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041341"},{"source":"f5sirt@f5.com","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K82038789"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/104920"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041340"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041341"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.f5.com/csp/article/K82038789"}],"sourceIdentifier":"f5sirt@f5.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-732"}],"source":"nvd@nist.gov","type":"Primary"}]}
|