CVE-2020-5858: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

On BIG-IP versions 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1 and BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, a privilege escalation vulnerability exists that allows users with non-administrator roles (such as Guest or Resource Administrator) who have tmsh shell access to execute arbitrary commands with elevated privileges (MITRE CVE).

The vulnerability exists in the Traffic Management Shell (tmsh) command interface where users with non-administrator roles can craft specific tmsh commands to gain elevated privileges. The issue stems from improper validation of user commands when executed through the tmsh shell (CERT-FR).

This vulnerability allows attackers with limited access privileges to execute arbitrary commands with elevated permissions, potentially leading to complete system compromise. Users with non-administrator roles such as Guest or Resource Administrator can bypass their intended access restrictions (MITRE CVE).

F5 has released security patches to address this vulnerability. Affected users should upgrade to the latest version of their respective BIG-IP or BIG-IQ installations. The vulnerability is tracked in F5's security advisory K36814487 (CERT-FR).