PT-2019-18179 · F5 · F5 Big-Ip+1

Publicado 2019-03-13 · Atualizado 2020-08-24 · CVE-2019-6597

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.8 F5 BIG-IP versions 11.6.1 through 11.6.3.2 F5 BIG-IP versions 12.1.0 through 12.1.3.7 F5 BIG-IP versions 13.0.0 through 13.1.1.1 F5 Enterprise Manager version 3.1.1

Description The issue affects authenticated administrative users who run commands in the Traffic Management User Interface (TMUI), also known as the BIG-IP Configuration utility. Restrictions on allowed commands may not be enforced, potentially leading to unauthorized actions.

Recommendations For F5 BIG-IP versions 11.5.1 through 11.5.8, update to a version outside of this range to enforce command restrictions. For F5 BIG-IP versions 11.6.1 through 11.6.3.2, update to a version outside of this range to enforce command restrictions. For F5 BIG-IP versions 12.1.0 through 12.1.3.7, update to a version outside of this range to enforce command restrictions. For F5 BIG-IP versions 13.0.0 through 13.1.1.1, update to a version outside of this range to enforce command restrictions. For F5 Enterprise Manager version 3.1.1, update to a version outside of this range to enforce command restrictions.

Correção

Identificadores relacionados

CVE-2019-6597

Produtos afetados

F5 Big-Ip

F5 Enterprise Manager

Referências · 3

• https://support.f5.com/csp/article/K29280193 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6597 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6597 · Nota de Segurança