Skip to content
fr Sign in
Not rated

CVE-2019-19151 On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ…

Description

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed.

Affected products and versions

Product Affected versions Fixed in
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 14.0.0-14.1.2.3 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 13.1.0-13.1.3.2 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 12.1.0-12.1.5 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 11.5.2-11.6.5.1 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 6.0.0-6.1.0 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 5.0.0-5.4.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager

The 2 CVEs of BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager →
CVE-2019-6642 In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and… Not rated
Track this CVE