{ "schema_version": "1.4.0", "id": "GHSA-jqpq-g57p-mp22", "modified": "2022-05-24T16:45:11Z", "published": "2022-05-24T16:45:11Z", "aliases": [ "CVE-2019-6618" ], "details": "On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, users with the Resource Administrator role can modify sensitive portions of the filesystem if provided Advanced Shell Access, such as editing /etc/passwd. This allows modifications to user objects and is contrary to our definition for the Resource Administrator (RA) role restrictions.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-6618" }, { "type": "WEB", "url": "https://support.f5.com/csp/article/K07702240" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-05-03T20:29:00Z" } }