VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 13, 2019· Updated Jun 17, 2026

CVE-2019-6601

CVE-2019-6601

Description

In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.

Affected products

2
  • F5, Inc./Big IPllm-create2 versions
    13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8+ 1 more
    • (no CPE)range: 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8
    • (no CPE)range: 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.