VDB
CVE-2019-6593
CVE-2019-6593
PUBLISHED
CVSS 4.300000190734863 MEDIUM
On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle (MITM) attack, despite the attacker not having gained access to the server's private key itself. (CVE-2019-6593 also known as Zombie POODLE and GOLDENDOODLE.)
EPSS 0.41% · 61.5th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
0.41%
61.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| f5 | big-ip_advanced_firewall_manager | 11.5.1, 12.1.0, 11.6.1 |
| f5 | big-ip_global_traffic_manager | 11.6.1, 11.5.1, 12.1.0 |
| f5 | big-ip_edge_gateway | 11.5.1, 12.1.0, 11.6.1 |
| f5 | big-ip_application_security_manager | 12.1.0, 11.6.1, 11.5.1 |
| f5 | big-ip_domain_name_system | 11.5.1, 12.1.0, 11.6.1 |
| f5 | big-ip_policy_enforcement_manager | 12.1.0, 11.5.1, 11.6.1 |
| f5 | big-ip_webaccelerator | 11.6.1, 11.5.1, 12.1.0 |
| F5 Networks, Inc. | BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) | 11.5.1-11.5.4, 11.6.1, 12.1.0 |
| f5 | big-ip_local_traffic_manager | 11.5.1, 11.6.1, 12.1.0 |
| f5 | big-ip_link_controller | 11.6.1, 11.5.1, 12.1.0 |
| f5 | big-ip_analytics | 12.1.0, 11.6.1, 11.5.1 |
| f5 | big-ip_access_policy_manager | 12.1.0, 11.6.1, 11.5.1 |
| f5 | big-ip_fraud_protection_service | 12.1.0, 11.6.1, 11.5.1 |
Timeline
- Feb 26, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
References
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11055&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11050&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11079&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11053&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11059&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11049&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11046&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11048&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11057&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11054&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11062&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11056&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11045&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11058&cat=SIRT_1&actp=LIST advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11047&cat=SIRT_1&actp=LIST advisory
- https://support.f5.com/csp/article/K10065173 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-6593 advisory