Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-6642

In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.

Published

2019-07-01T21:15:11.153

Last Modified

2024-11-21T04:46:52.003

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application f5 big-ip_access_policy_manager ≤ 11.6.4 Yes
Application f5 big-ip_access_policy_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_access_policy_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_access_policy_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_access_policy_manager 15.0.0 Yes
Application f5 big-ip_advanced_firewall_manager ≤ 11.6.4 Yes
Application f5 big-ip_advanced_firewall_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_advanced_firewall_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_advanced_firewall_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_advanced_firewall_manager 15.0.0 Yes
Application f5 big-ip_application_acceleration_manager ≤ 11.6.4 Yes
Application f5 big-ip_application_acceleration_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_application_acceleration_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_application_acceleration_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_application_acceleration_manager 15.0.0 Yes
Application f5 big-ip_link_controller ≤ 11.6.4 Yes
Application f5 big-ip_link_controller ≤ 12.1.4.2 Yes
Application f5 big-ip_link_controller ≤ 13.1.1.5 Yes
Application f5 big-ip_link_controller ≤ 14.1.0.5 Yes
Application f5 big-ip_link_controller 15.0.0 Yes
Application f5 big-ip_policy_enforcement_manager ≤ 11.6.4 Yes
Application f5 big-ip_policy_enforcement_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_policy_enforcement_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_policy_enforcement_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_policy_enforcement_manager 15.0.0 Yes
Application f5 big-ip_webaccelerator ≤ 11.6.4 Yes
Application f5 big-ip_webaccelerator ≤ 12.1.4.2 Yes
Application f5 big-ip_webaccelerator ≤ 13.1.1.5 Yes
Application f5 big-ip_webaccelerator ≤ 14.1.0.5 Yes
Application f5 big-ip_webaccelerator 15.0.0 Yes
Application f5 big-ip_application_security_manager ≤ 11.6.4 Yes
Application f5 big-ip_application_security_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_application_security_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_application_security_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_application_security_manager 15.0.0 Yes
Application f5 big-ip_local_traffic_manager ≤ 11.6.4 Yes
Application f5 big-ip_local_traffic_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_local_traffic_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_local_traffic_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_local_traffic_manager 15.0.0 Yes
Application f5 big-ip_fraud_protection_service ≤ 11.6.4 Yes
Application f5 big-ip_fraud_protection_service ≤ 12.1.4.2 Yes
Application f5 big-ip_fraud_protection_service ≤ 13.1.1.5 Yes
Application f5 big-ip_fraud_protection_service ≤ 14.1.0.5 Yes
Application f5 big-ip_fraud_protection_service 15.0.0 Yes
Application f5 big-ip_global_traffic_manager ≤ 11.6.4 Yes
Application f5 big-ip_global_traffic_manager ≤ 12.1.4.2 Yes
Application f5 big-ip_global_traffic_manager ≤ 13.1.1.5 Yes
Application f5 big-ip_global_traffic_manager ≤ 14.1.0.5 Yes
Application f5 big-ip_global_traffic_manager 15.0.0 Yes
Application f5 big-ip_analytics ≤ 11.6.4 Yes
Application f5 big-ip_analytics ≤ 12.1.4.2 Yes
Application f5 big-ip_analytics ≤ 13.1.1.5 Yes
Application f5 big-ip_analytics ≤ 14.1.0.5 Yes
Application f5 big-ip_analytics 15.0.0 Yes
Application f5 big-ip_edge_gateway ≤ 11.6.4 Yes
Application f5 big-ip_edge_gateway ≤ 12.1.4.2 Yes
Application f5 big-ip_edge_gateway ≤ 13.1.1.5 Yes
Application f5 big-ip_edge_gateway ≤ 14.1.0.5 Yes
Application f5 big-ip_edge_gateway 15.0.0 Yes
Application f5 big-ip_domain_name_system ≤ 11.6.4 Yes
Application f5 big-ip_domain_name_system ≤ 12.1.4.2 Yes
Application f5 big-ip_domain_name_system ≤ 13.1.1.5 Yes
Application f5 big-ip_domain_name_system ≤ 14.1.0.5 Yes
Application f5 big-ip_domain_name_system 15.0.0 Yes
Application f5 big-iq_centralized_management ≤ 5.4.0 Yes
Application f5 big-iq_centralized_management ≤ 6.1.0 Yes
Application f5 enterprise_manager 3.1.1 Yes
Application f5 iworkflow 2.3.0 Yes
References