CVE-2019-6601: Medium severity f5 big-ip application acceleration manager vulnerability
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-6601?
CVE-2019-6601 is rated as a high severity vulnerability due to its potential to allow unauthorized access and escalation of privileges.
How do I fix CVE-2019-6601?
To fix CVE-2019-6601, upgrade the F5 BIG-IP Application Acceleration Manager to a version that is not affected, specifically 13.1.0 or later.
What systems are affected by CVE-2019-6601?
CVE-2019-6601 affects F5 BIG-IP Application Acceleration Manager versions 11.5.1 through 11.5.8, 11.6.1 through 11.6.3, 12.1.0 through 12.1.3, and 13.0.0.
What type of vulnerability is represented by CVE-2019-6601?
CVE-2019-6601 is a privilege escalation vulnerability due to improper permission handling in the wamd process.
Can CVE-2019-6601 be exploited remotely?
Yes, CVE-2019-6601 can be exploited remotely, allowing attackers to execute arbitrary code with elevated privileges.