CVE-2019-6688
N/A
N/A
Summary
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is able to obtain the secret that was being used to encrypt a BIG-IP UCS backup file while sending SNMP query to the BIG-IP or BIG-IQ system, however the user can not access to the UCS files.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| F5 | BIG-IP | BIG-IP 15.0.0-15.0.1.1 | affected |
| F5 | BIG-IP | 14.1.0-14.1.2.2 | affected |
| F5 | BIG-IP | 14.0.0-14.0.1 | affected |
| F5 | BIG-IP | 13.1.0-13.1.3.1 | affected |
| F5 | BIG-IP | 12.1.0-12.1.5 | affected |
| F5 | BIG-IP | 11.5.2-11.6.5 | affected |
| F5 | BIG-IQ | BIG-IQ 6.0.0-6.1.0 | affected |
| F5 | BIG-IQ | 5.2.0-5.4.0 | affected |
Weaknesses
- Information disclosure
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.