Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-6688

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is abl

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is able to obtain the secret that was being used to encrypt a BIG-IP UCS backup file while sending SNMP query to the BIG-IP or BIG-IQ system, however the user can not access to the UCS files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • BIG-IP 15.0.0-15.0.1.1affected
  • 14.1.0-14.1.2.2affected
  • 14.0.0-14.0.1affected
  • 13.1.0-13.1.3.1affected
  • 12.1.0-12.1.5affected
  • 11.5.2-11.6.5affected

F5 BIG-IQ

  • BIG-IQ 6.0.0-6.1.0affected
  • 5.2.0-5.4.0affected

References