Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-6665

On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflow will be able to set up the proxy the same way and intercept the traffic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP ASM

  • 15.0.0-15.0.1affected
  • 14.1.0-14.1.2affected
  • 14.0.0-14.0.1affected
  • 13.1.0-13.1.3.1affected

F5 BIG-IQ

  • 6.0.0affected
  • 5.2.0-5.4.0affected

F5 IWorkflow

  • 2.3.0affected

F5 Enterprise Manager

  • 3.1.1affected

References