CVE-2019-6643
- EPSS 0.58%
- Veröffentlicht 04.09.2019 18:15:11
- Zuletzt bearbeitet 21.11.2024 04:46:52
On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the TMM pr...
CVE-2019-6646
- EPSS 0.42%
- Veröffentlicht 04.09.2019 18:15:11
- Zuletzt bearbeitet 21.11.2024 04:46:52
On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges.
CVE-2019-6644
- EPSS 0.79%
- Veröffentlicht 04.09.2019 17:15:11
- Zuletzt bearbeitet 21.11.2024 04:46:52
Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized user...
CVE-2019-6647
- EPSS 0.46%
- Veröffentlicht 04.09.2019 17:15:11
- Zuletzt bearbeitet 21.11.2024 04:46:52
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the managem...
CVE-2019-6645
- EPSS 0.78%
- Veröffentlicht 04.09.2019 16:15:10
- Zuletzt bearbeitet 21.11.2024 04:46:52
On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection mirroring configured may lead to a TMM crash causing the configured HA ac...
CVE-2019-10744
- EPSS 3.41%
- Veröffentlicht 26.07.2019 00:15:11
- Zuletzt bearbeitet 21.11.2024 04:19:50
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
CVE-2019-6634
- EPSS 0.35%
- Veröffentlicht 03.07.2019 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:46:51
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The ...
CVE-2019-6635
- EPSS 0.13%
- Veröffentlicht 03.07.2019 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:46:51
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, when the BIG-IP system is licensed for Appliance mode, a user with either the Administrator or the Resource Administrator role can bypass ...
CVE-2019-6638
- EPSS 0.5%
- Veröffentlicht 03.07.2019 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:46:51
On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process.
CVE-2019-6640
- EPSS 0.13%
- Veröffentlicht 03.07.2019 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:46:51
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, SNMP exposes sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is inserted into...