Non notée
CVE-2019-6609 Platform dependent weakness
Description
Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 14.0.0-14.1.0.1, 13.0.0-13.1.1.3, and 12.1.1 HF2-12.1.4, the secureKeyCapable attribute was not set which causes secure vault to not use the F5 hardware support to store the unit key. Instead the unit key is stored in plaintext on disk as would be the case for Z100 systems. Additionally this causes the unit key to be stored in UCS files taken on these platforms.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIG-IP APM | 14.0.0-14.1.0.1 | Pas de correctif indiqué |
| BIG-IP APM | 13.0.0-13.1.1.3 | Pas de correctif indiqué |
Références
- support.f5.com support.f5.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIG-IP APM
Les 12 CVE de BIG-IP APM →
CVE-2022-35245
In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM…
7.5
Élevée
CVE-2022-33203
In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access…
7.5
Élevée
CVE-2022-31473
In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated…
6.8
Moyenne
CVE-2022-29263
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to…
7.8
Élevée