CVE-2019-6607
N/A
N/A
Summary
On BIG-IP ASM 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, there is a stored cross-site scripting vulnerability in an ASM violation viewed in the Configuration utility. In the worst case, an attacker can store a CSRF which results in code execution as the admin user.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| BIG-IP | BIG-IP (ASM) | 11.5.1-11.5.8 | affected |
| BIG-IP | BIG-IP (ASM) | 11.6.1-11.6.3 | affected |
| BIG-IP | BIG-IP (ASM) | 12.1.0-12.1.3 | affected |
| BIG-IP | BIG-IP (ASM) | 13.0.0-13.1.1.3 | affected |
| BIG-IP | BIG-IP (ASM) | 14.0.0-14.0.0.2 | affected |
Weaknesses
- XSS/CSRF
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.