VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 13, 2019· Updated Sep 17, 2024

CVE-2019-6601

CVE-2019-6601

Description

In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.

Affected products

2
  • F5, Inc./Big IPllm-fuzzy2 versions
    13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8+ 1 more
    • (no CPE)range: 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8
    • (no CPE)range: 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.