QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-19151

Back to search

CVE-2019-19151

Published: Dec 23, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed.

VendorProductVersions

F5

BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager

affected
BIG-IP 15.0.0-15.1.0
affected
14.0.0-14.1.2.3
affected
13.1.0-13.1.3.2
affected
12.1.0-12.1.5
affected
11.5.2-11.6.5.1

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now