Privilege Escalation Vulnerability in BIG-IP and Enterprise Manager by F5 Networks
CVE-2019-6646

8.8HIGH

Key Information:

Vendor
F5
Status
Big-ip, Enterprise Manager
Vendor
CVE Published:
4 September 2019

Summary

A security flaw exists in the BIG-IP and Enterprise Manager products from F5 Networks, allowing REST users with guest privileges to potentially escalate their access rights. This vulnerability could enable unauthorized users to execute commands with administrative privileges, which poses a significant risk to system integrity and security.

Affected Version(s)

BIG-IP, Enterprise Manager BIG-IP 11.5.2-11.6.4, EM 3.1.1

References

https://support.f5.com/csp/article/K53990093
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.