Vulnetix
Try Vulnetix Request Demo
CVE-2019-6662 PUBLISHED CVSS 6.5 MEDIUM

On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request. Users with access to the log files would be able to view that data.

EPSS 0.31% · 54.3th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.31%
54.3th percentile

Affected Products

VendorProductVersions
f5big-ip_webaccelerator13.1.0
f5big-ip_link_controller13.1.0
f5big-ip_local_traffic_manager13.1.0
f5big-ip_edge_gateway13.1.0
f5big-ip_application_acceleration_manager13.1.0
f5big-ip_analytics13.1.0
f5big-ip_policy_enforcement_manager13.1.0
f5big-ip_access_policy_manager13.1.0
n/aBIG-IP13.1.0-13.1.1.4
f5big-ip_global_traffic_manager13.1.0
f5big-ip_domain_name_system13.1.0
f5big-ip_application_security_manager13.1.0
f5big-ip_fraud_protection_service13.1.0
f5big-ip_advanced_firewall_manager13.1.0

Timeline

References

Open in Interactive Console →