CVE-2019-19151

CVE-2019-19151: falha em F5 BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BIG-IP+ Monitorar BIG-IQ

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed.
Produtos afetados
F5 · BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager
CVEs relacionadas — F5 BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2019-6642—CVE-2019-6642EPSS 1.8%