Skip to content
fr Sign in
Not rated

CVE-2019-6642 In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and…

Description

In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.

Affected products and versions

Product Affected versions Fixed in
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 14.0.0-14.1.0.5 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 13.0.0-13.1.1.5 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 12.1.0-12.1.4.2 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 11.5.2-11.6.4 No fix stated
BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager 5.1.0-5.4.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager

The 2 CVEs of BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager →
CVE-2019-19151 On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ… Not rated
Track this CVE