SQL Injection Vulnerability in F5 BIG-IP AFM Configuration Utility
CVE-2019-6658

4.3MEDIUM

Key Information:

Vendor
F5
Status
Big-ip (afm)
Vendor
CVE Published:
1 November 2019

Summary

A security vulnerability in the F5 BIG-IP AFM configuration utility allows authenticated users to potentially execute SQL injection attacks. This could lead to unauthorized data retrieval, manipulation of data, or impact the integrity and availability of the application. Proper security measures and patching are essential to mitigate this risk and protect against potential exploitation.

Affected Version(s)

BIG-IP (AFM) 15.0.0-15.0.1

BIG-IP (AFM) 14.0.0-14.1.2

BIG-IP (AFM) 13.1.0-13.1.3.1

References

https://support.f5.com/csp/article/K21121741
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.