big-ip_policy_enforcement_manager Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/big-ip_policy_enforcement_manager/ Sun, 26 Feb 2023 06:34:00 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png big-ip_policy_enforcement_manager Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/big-ip_policy_enforcement_manager/ 32 32 CVE-2019-6613 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6613/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6613/ On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is used with various profile types and is accessed using SNMPv2.

The post CVE-2019-6613 appeared first on CVE Vulnerability.

]]> On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is used with various profile types and is accessed using SNMPv2.

The post CVE-2019-6613 appeared first on CVE Vulnerability.

]]> CVE-2019-6614 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6614/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6614/ On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrites in Appliance Mode were not fully effective. An authenticated attacker with a high privilege level may be able to bypass protections implemented in appliance mode to overwrite arbitrary system files.

The post CVE-2019-6614 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrites in Appliance Mode were not fully effective. An authenticated attacker with a high privilege level may be able to bypass protections implemented in appliance mode to overwrite arbitrary system files.

The post CVE-2019-6614 appeared first on CVE Vulnerability.

]]> CVE-2019-6616 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6616/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6616/ On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, administrative users with TMSH access can overwrite critical system files on BIG-IP which can result in bypass of whitelist / blacklist restrictions enforced by appliance mode.

The post CVE-2019-6616 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, administrative users with TMSH access can overwrite critical system files on BIG-IP which can result in bypass of whitelist / blacklist restrictions enforced by appliance mode.

The post CVE-2019-6616 appeared first on CVE Vulnerability.

]]> CVE-2019-6617 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6617/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6617/ On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource Administrator role is able to overwrite sensitive low-level files (such as /etc/passwd) using SFTP to modify user permissions, without Advanced Shell access. This is contrary to our definition for the Resource Administrator (RA) role restrictions.

The post CVE-2019-6617 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource Administrator role is able to overwrite sensitive low-level files (such as /etc/passwd) using SFTP to modify user permissions, without Advanced Shell access. This is contrary to our definition for the Resource Administrator (RA) role restrictions.

The post CVE-2019-6617 appeared first on CVE Vulnerability.

]]> CVE-2019-6619 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6619/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6619/ On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation (ALPN) enabled and it processes traffic where the ALPN extension size is zero.

The post CVE-2019-6619 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation (ALPN) enabled and it processes traffic where the ALPN extension size is zero.

The post CVE-2019-6619 appeared first on CVE Vulnerability.

]]> CVE-2019-6623 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6623/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6623/ On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).

The post CVE-2019-6623 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).

The post CVE-2019-6623 appeared first on CVE Vulnerability.

]]> CVE-2019-6629 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6629/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6629/ On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane.

The post CVE-2019-6629 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane.

The post CVE-2019-6629 appeared first on CVE Vulnerability.

]]> CVE-2019-6639 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6639/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6639/ On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting (XSS) issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the […]

The post CVE-2019-6639 appeared first on CVE Vulnerability.

]]> On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting (XSS) issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the XSS.

The post CVE-2019-6639 appeared first on CVE Vulnerability.

]]> CVE-2019-6600 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6600/ Sun, 26 Feb 2023 06:33:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6600/ In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external users are granted the “guest” role, unsanitized values can be reflected to the client via the login page. This can lead to a cross-site scripting attack against unauthenticated clients.

The post CVE-2019-6600 appeared first on CVE Vulnerability.

]]> In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external users are granted the “guest” role, unsanitized values can be reflected to the client via the login page. This can lead to a cross-site scripting attack against unauthenticated clients.

The post CVE-2019-6600 appeared first on CVE Vulnerability.

]]> CVE-2019-6612 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6612/ Sun, 26 Feb 2023 06:33:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6612/ On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart.

The post CVE-2019-6612 appeared first on CVE Vulnerability.

]]> On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart.

The post CVE-2019-6612 appeared first on CVE Vulnerability.

]]>