1. Home
  2. CVE Database
  3. CVE-2019-6642
HIGH · 8.8

CVE-2019-6642

In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ...

Vulnerability Description

In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Ip Access Policy Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Advanced Firewall Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Application Acceleration Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Link Controller>= 11.5.2, <= 11.6.4
F5Big-Ip Policy Enforcement Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Webaccelerator>= 11.5.2, <= 11.6.4
F5Big-Ip Application Security Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Local Traffic Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Fraud Protection Service>= 11.5.2, <= 11.6.4
F5Big-Ip Global Traffic Manager>= 11.5.2, <= 11.6.4
F5Big-Ip Analytics>= 11.5.2, <= 11.6.4
F5Big-Ip Edge Gateway>= 11.5.2, <= 11.6.4
F5Big-Ip Domain Name System>= 11.5.2, <= 11.6.4
F5Big-Iq Centralized Management>= 5.1.0, <= 5.4.0
F5Enterprise Manager3.1.1
F5Iworkflow2.3.0

References

FAQ

What is CVE-2019-6642?

CVE-2019-6642 is a vulnerability with a CVSS score of 8.8 (HIGH). In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ...

How severe is CVE-2019-6642?

CVE-2019-6642 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-6642?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Access Policy Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Link Controller, F5 Big-Ip Policy Enforcement Manager.