PT-2019-18217 · F5 · Big-Ip
CVE-2019-6635
·
Published
2019-07-03
·
Updated
2023-02-16
CVSS v3.1
4.4
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
BIG-IP versions 11.5.1 through 11.5.8
BIG-IP versions 11.6.1 through 11.6.3.4
BIG-IP versions 12.1.0 through 12.1.4
BIG-IP versions 13.0.0 through 13.1.1.4
BIG-IP versions 14.0.0 through 14.0.0.4
BIG-IP versions 14.1.0 through 14.1.0.5
Description
A user with either the Administrator or the Resource Administrator role can bypass Appliance mode restrictions when the BIG-IP system is licensed for Appliance mode.
Recommendations
For BIG-IP versions 11.5.1 through 11.5.8, restrict access to Administrator and Resource Administrator roles to minimize the risk of exploitation.
For BIG-IP versions 11.6.1 through 11.6.3.4, restrict access to Administrator and Resource Administrator roles to minimize the risk of exploitation.
For BIG-IP versions 12.1.0 through 12.1.4, restrict access to Administrator and Resource Administrator roles to minimize the risk of exploitation.
For BIG-IP versions 13.0.0 through 13.1.1.4, restrict access to Administrator and Resource Administrator roles to minimize the risk of exploitation.
For BIG-IP versions 14.0.0 through 14.0.0.4, restrict access to Administrator and Resource Administrator roles to minimize the risk of exploitation.
For BIG-IP versions 14.1.0 through 14.1.0.5, restrict access to Administrator and Resource Administrator roles to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Big-Ip