CVE-2019-6607

Published: Mar 28, 2019Modified: Nov 21, 2024

6.8

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

On BIG-IP ASM 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, there is a stored cross-site scripting vulnerability in an ASM violation viewed in the Configuration utility. In the worst case, an attacker can store a CSRF which results in code execution as the admin user.

Affected (5)

Products: F5: Big Ip Application Security Manager

1 product

Big Ip Application Security Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Application Security Manager	From 11.5.1 to 11.5.8
F5 Big Ip Application Security Manager	From 11.6.1 to 11.6.3
F5 Big Ip Application Security Manager	From 12.1.0 to 12.1.3
F5 Big Ip Application Security Manager	From 13.0.0 to 13.1.1.3
F5 Big Ip Application Security Manager	From 14.0.0 to 14.0.0.2