7.5

CVE-2019-6629

On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane.

Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Analytics Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Access Policy Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Application Security Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Domain Name System Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Edge Gateway Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Global Traffic Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Link Controller Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Webaccelerator Version >= 14.1.0.1 <= 14.1.0.5
F5 ≫ Big-ip Websafe Version >= 14.1.0.1 <= 14.1.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.7% 0.697
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P