Tracker / CVE-2019-6632
CVE-2019-6632
Media 5.5
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to encrypted configuration and/or UCS files.
Prodotti e versioni affette
| f5 | big-ip_access_policy_manager · 12.1.0 → 12.1.4.1 |
|---|---|
| f5 | big-ip_access_policy_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_access_policy_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_access_policy_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_advanced_firewall_manager · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_advanced_firewall_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_advanced_firewall_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_advanced_firewall_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_analytics · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_analytics · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_analytics · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_analytics · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_application_acceleration_manager · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_application_acceleration_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_application_acceleration_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_application_acceleration_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_application_security_manager · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_application_security_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_application_security_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_application_security_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_domain_name_system · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_domain_name_system · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_domain_name_system · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_domain_name_system · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_edge_gateway · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_edge_gateway · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_edge_gateway · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_edge_gateway · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_fraud_protection_service · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_fraud_protection_service · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_fraud_protection_service · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_fraud_protection_service · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_global_traffic_manager · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_global_traffic_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_global_traffic_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_global_traffic_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_link_controller · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_link_controller · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_link_controller · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_link_controller · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_local_traffic_manager · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_local_traffic_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_local_traffic_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_local_traffic_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_policy_enforcement_manager · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_policy_enforcement_manager · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_policy_enforcement_manager · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_policy_enforcement_manager · 14.1.0 → 14.1.0.6 |
| f5 | big-ip_webaccelerator · 12.1.0 → 12.1.4.1 |
| f5 | big-ip_webaccelerator · 13.0.0 → 13.1.1.5 |
| f5 | big-ip_webaccelerator · 14.0.0 → 14.0.0.5 |
| f5 | big-ip_webaccelerator · 14.1.0 → 14.1.0.6 |
Analisi
Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.