CVE-2019-6649

4 documents4 sources
Severity
9.1CRITICAL
EPSS
0.5%
top 33.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
14
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Analytics+11 more
Timeline
PublishedSep 20
Latest updateMay 24

Description

F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 3.9 | Impact: 5.2

Affected Packages14 packages

▶NVDf5/big-ip_domain_name_system11.5.2 — 11.5.9+6
▶NVDf5/big-ip_access_policy_manager11.5.2 — 11.5.9+6
▶NVDf5/big-ip_local_traffic_manager11.5.2 — 11.5.9+6
▶NVDf5/big-ip_global_traffic_manager11.5.2 — 11.5.9+6

🔴Vulnerability Details

2
GHSA
GHSA-5643-5c7v-237m: F5 BIG-IP 15↗2022-05-24
▶
CVEList
CVE-2019-6649: F5 BIG-IP 15↗2019-09-20
▶

📋Vendor Advisories

1
F5
CVE-2019-6649: F5 BIG-IP 15↗2019-09-20
▶
CVE-2019-6649 (CRITICAL CVSS 9.1) | F5 BIG-IP 15.0.0 | cvebase.io