F5 BIG-IP Appliance Mode Bypass Vulnerability in iHealth Command Allowing Shell Access

A vulnerability in the iHealth utility of the TMOS Shell (tmsh) on F5 BIG-IP systems in Appliance mode may allow an authenticated attacker with resource administrator role privileges to bypass tmsh restrictions and access the Advanced Shell (bash). This exploitation can cross a security boundary on affected systems.

Impact

Exploitation of this vulnerability bypasses Appliance mode security on BIG-IP systems, allowing an authenticated attacker to access the bash shell and potentially cross security boundaries.

Remediation

Users can upgrade to BIG-IP versions 17.5.1.1, 17.1.3, 16.1.6.1, or 15.1.10.8. For more information about F5 hotfixes and point releases, refer to the F5 BIG-IP hotfix and point release matrix.