« Volver al listado

CVE-2019-6662

Estado: ModificadaMedia (6.5)—

On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request. Users with access to the log files would be able to view that data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (13)

F5 — Big-ip Access Policy ManagerF5 — Big-ip Advanced Firewall ManagerF5 — Big-ip AnalyticsF5 — Big-ip Application Acceleration ManagerF5 — Big-ip Application Security ManagerF5 — Big-ip Domain Name SystemF5 — Big-ip Edge GatewayF5 — Big-ip Fraud Protection ServiceF5 — Big-ip Global Traffic ManagerF5 — Big-ip Link ControllerF5 — Big-ip Local Traffic ManagerF5 — Big-ip Policy Enforcement ManagerF5 — Big-ip Webaccelerator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-6662",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "f5sirt@f5.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "BIG-IP",
          "versions": [
            {
              "status": "affected",
              "version": "13.1.0-13.1.1.4"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-11-15T21:15:11.417",
  "references": [
    {
      "url": "https://support.f5.com/csp/article/K01049383",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "f5sirt@f5.com"
    },
    {
      "url": "https://support.f5.com/csp/article/K01049383",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request. Users with access to the log files would be able to view that data."
    },
    {
      "lang": "es",
      "value": "En BIG-IP versiones 13.1.0 hasta 13.1.1.4, la información confidencial es registrada en los archivos de registro locales y/o en los objetivos de registro remoto cuando restjavad procesa una petición no válida. Los usuarios con acceso a los archivos de registro podrían visualizar esos datos."
    }
  ],
  "lastModified": "2026-06-17T02:39:27.483",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54890F1C-6D1F-4624-9CBD-7FBA459EB8B6",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9221A67E-BFAE-45E6-BBCD-F1F4977DE085",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A1520AB-C1EF-4B2B-9731-25FD116C6BB9",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "989E244A-F4E0-464B-8E59-54575628B660",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D51A393-FDA1-4BF9-A862-3E4269AC54FC",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FCE5BC0-FBE2-4302-8BE4-21099F391493",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E13D6376-4EBA-40BC-A6E9-4D32F6AD6151",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "099AF6B8-5DBD-4243-9191-BE315C8190CA",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9A5C9EC-8AE2-41C7-B04F-01078DCDEF21",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17FBF5CD-7B80-4CDA-B96F-BC1B174DC33A",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CD8267D-8852-44C0-A7F4-BBA8A423C980",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDA2EA37-B703-48C2-B8A2-A891305B32ED",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            },
            {
              "criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C967219B-B0DB-4516-B95D-A4AF2657F004",
              "versionEndExcluding": "13.1.1.5",
              "versionStartIncluding": "13.1.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "f5sirt@f5.com"
}