CVE-2019-6665

CVE-2019-6665: falha em F5 BIG-IP ASM

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BIG-IQ+ Monitorar Enterprise Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.1%
On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflow will be able to set up the proxy the same way and intercept the traffic.
Produtos afetados
F5 · BIG-IP ASMF5 · BIG-IQF5 · Enterprise ManagerF5 · IWorkflow
CVEs relacionadas — F5 BIG-IP ASM

No mesmo produto, das mais perigosas para as menos.

CVE-2019-6682—CVE-2019-6682EPSS 1.0%CVE-2022-41770MEDIUMBIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770EPSS 0.7%CVE-2022-41694MEDIUMBIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694EPSS 0.7%CVE-2019-6688—CVE-2019-6688EPSS 0.7%CVE-2024-47139MEDIUMF5 BIG-IQ VulnerabilityEPSS 0.6%CVE-2023-38419MEDIUMBIG-IP and BIG-IQ iControl SOAP vulnerabilityEPSS 0.5%