Unrated severityNVD Advisory· Published Jul 1, 2019· Updated Aug 4, 2024
CVE-2019-6642
CVE-2019-6642
Description
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.
Affected products
1- Range: BIG-IP 15.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- support.f5.com/csp/article/K40378764mitrex_refsource_CONFIRM
- support.f5.com/csp/article/K40378764mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.