Skip to content
fr Sign in
Not rated

CVE-2019-19150 On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the…

Description

On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP APM system logs the client-session-id when a per-session policy is attached to the virtual server with debug logging enabled.

Affected products and versions

Product Affected versions Fixed in
BIG-IP APM 15.0.0-15.0.1.1 No fix stated
BIG-IP APM 14.1.0-14.1.2 No fix stated
BIG-IP APM 14.0.0-14.0.1 No fix stated
BIG-IP APM 13.1.0-13.1.3.1 No fix stated
BIG-IP APM 12.1.0-12.1.5 No fix stated
BIG-IP APM 11.5.2-11.6.5.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP APM

The 12 CVEs of BIG-IP APM →
CVE-2022-35245 In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM… 7.5 High CVE-2022-33203 In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access… 7.5 High CVE-2022-31473 In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated… 6.8 Medium CVE-2022-29263 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to… 7.8 High
Track this CVE