QwikSec

Security Database

CVE

CWE

Training

CVE-2019-6634

Published: Jul 3, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The attack requires an authenticated user with any role.

Vendor	Product	Versions
F5	BIG-IP	affected `BIG-IP 14.1.0-14.1.0.5` affected `14.0.0-14.0.0.4` affected `13.0.0-13.1.1.4` affected `12.1.0-12.1.4`

References

https://support.f5.com/csp/article/K64855220

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.