K58935003 : F5 Container Connector vulnerability CVE-2018-5543

Security Advisory Description

The F5 BIG-IP Controller for Kubernetes (k8s-bigip-crtl) passes BIG-IP username and password as command line parameters, which may lead to disclosure of the credentials used by the container. (CVE-2018-5543)

Impact

F5 BIG-IP Controller for Kubernetes

This vulnerability exposes BIG-IP username and passwords to non-privileged user logged on to the Kubernetes worker node where the container is running.

BIG-IP / BIG-IQ / F5 iWorkflow / Enterprise Manager / ARX / Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.