CVE-2019-6642
Last modified
CVE-2019-6642 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.. EPSS estimates a 1.82% chance of exploitation in the next 30 days.
Description
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Access Policy Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Access Policy Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Access Policy Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Access Policy Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Access Policy Manager | 15.0.0 |
| F5 | Big-Ip Advanced Firewall Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Advanced Firewall Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Advanced Firewall Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Advanced Firewall Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Advanced Firewall Manager | 15.0.0 |
| F5 | Big-Ip Application Acceleration Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Application Acceleration Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Application Acceleration Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Application Acceleration Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Application Acceleration Manager | 15.0.0 |
| F5 | Big-Ip Link Controller | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Link Controller | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Link Controller | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Link Controller | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Link Controller | 15.0.0 |
| F5 | Big-Ip Policy Enforcement Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Policy Enforcement Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Policy Enforcement Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Policy Enforcement Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Policy Enforcement Manager | 15.0.0 |
| F5 | Big-Ip Webaccelerator | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Webaccelerator | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Webaccelerator | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Webaccelerator | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Webaccelerator | 15.0.0 |
| F5 | Big-Ip Application Security Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Application Security Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Application Security Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Application Security Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Application Security Manager | 15.0.0 |
| F5 | Big-Ip Local Traffic Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Local Traffic Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Local Traffic Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Local Traffic Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Local Traffic Manager | 15.0.0 |
| F5 | Big-Ip Fraud Protection Service | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Fraud Protection Service | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Fraud Protection Service | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Fraud Protection Service | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Fraud Protection Service | 15.0.0 |
| F5 | Big-Ip Global Traffic Manager | >= 11.5.2, <= 11.6.4 |
| F5 | Big-Ip Global Traffic Manager | >= 12.1.0, <= 12.1.4.2 |
| F5 | Big-Ip Global Traffic Manager | >= 13.0.0, <= 13.1.1.5 |
| F5 | Big-Ip Global Traffic Manager | >= 14.0.0, <= 14.1.0.5 |
| F5 | Big-Ip Global Traffic Manager | 15.0.0 |
Showing 50 of 69 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-6642?
How severe is CVE-2019-6642?
How do I fix CVE-2019-6642?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-6636On BIG-IP (AFM, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.…
- CVE-2019-6637On BIG-IP (ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.…
- CVE-2019-6638On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed htt…6.5
- CVE-2019-6639On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.…4.8
- CVE-2019-6640On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4,…5.3
- CVE-2019-6641On BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iC…6.5
- CVE-2019-6643On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2,…7.5
- CVE-2019-6644Similar to the issue identified in CVE-2018-12120, on versio…9.4
- CVE-2019-6645On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 1…7.5
- CVE-2019-6646On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST u…
- CVE-2019-6647On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 1…5.3
- CVE-2019-6648On version 1.9.0, If DEBUG logging is enable, F5 Container I…4.4
Are you affected by CVE-2019-6642?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST