Vulnerability in F5 Big-Ip Access Policy Manager
CVE-2019-6642
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.018 (78.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 78.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- F5 Big-Ip Access Policy Manager — versions 15.0.0
- F5 Big-Ip Advanced Firewall Manager — versions 15.0.0
- F5 Big-Ip Analytics — versions 15.0.0
- F5 Big-Ip Application Acceleration Manager — versions 15.0.0
- F5 Big-Ip Application Security Manager — versions 15.0.0
- F5 Big-Ip, Big-Iq, Iworkflow, Enterprise Manager — versions BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5
- F5 Big-Ip Domain Name System — versions 15.0.0
- F5 Big-Ip Edge Gateway — versions 15.0.0
- F5 Big-Ip Fraud Protection Service — versions 15.0.0
- F5 Big-Ip Global Traffic Manager — versions 15.0.0
References
- support.f5.com/csp/article/K40378764 (Vendor Advisory)
- support.f5.com/csp/article/K40378764
Frequently asked questions
- What is CVE-2019-6642?
- CVE-2019-6642 is a high-severity vulnerability in F5 Big-Ip Access Policy Manager. CVSS score: 8.8/10. Published 2019-07-01.
- How severe is CVE-2019-6642?
- High severity. CVSS v3 base score is 8.8 out of 10.