Code from highly respected F5 enterprise web security appliances basically runs tar as root on input from HTTP at /mgmt/tm/util/bash URL 🤔 And it's 2021.

@kravietz what could possibly go wrong?

@thatguyoverthere

Just an extra admin console :)

https://github.com/h4x0r-dz/RCE-Exploit-in-BIG-IP/blob/main/f5_rce.py