PT-2019-18209 · F5 · F5 Ssl Orchestrator

Publicado 2019-07-03 · Atualizado 2019-07-10 · CVE-2019-6627

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 SSL Orchestrator versions 14.1.0 through 14.1.0.5

Description The issue occurs under specific conditions involving a race condition, where the Traffic Management Microkernel (TMM) may restart when SSL Forward Proxy enforces a bypass action for an SSL Orchestrator transparent virtual server that has SNAT (Secure Network Address Translation) enabled.

Recommendations For F5 SSL Orchestrator versions 14.1.0 through 14.1.0.5, consider temporarily disabling SNAT for SSL Orchestrator transparent virtual servers to minimize the risk of TMM restarts until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2019-6627

Produtos afetados

F5 Ssl Orchestrator

Referências · 3

• https://support.f5.com/csp/article/K36320691 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6627 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6627 · Nota de Segurança