CVE-2019-6609: Critical severity riverbed steelapp traffic manager vulnerability
Published Apr 15, 2019
·Updated
Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 14.0.0-14.1.0.1, 13.0.0-13.1.1.3, and 12.1.1 HF2-12.1.4, the secureKeyCapable attribute was not set which causes secure vault to not use the F5 hardware support to store the unit key. Instead the unit key is stored in plaintext on disk as would be the case for Z100 systems. Additionally this causes the unit key to be stored in UCS files taken on these platforms.
Affected Software
426 affected components
F5 Big-ip Local Traffic Manager>=12.1.2<12.1.4.1
F5 Big-ip Local Traffic Manager>=13.0.0<13.1.1.4
F5 Big-ip Local Traffic Manager>=14.0.0<14.1.0.2
F5 Big-ip Local Traffic Manager=12.1.1-hf2
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
F5 Big-ip Application Acceleration Manager>=12.1.2<12.1.4.1
F5 Big-ip Application Acceleration Manager>=13.0.0<13.1.1.4
F5 Big-ip Application Acceleration Manager>=14.0.0<14.1.0.2
F5 Big-ip Application Acceleration Manager=12.1.1-hf2
F5 BIG-IP Advanced Firewall Manager>=12.1.2<12.1.4.1
F5 BIG-IP Advanced Firewall Manager>=13.0.0<13.1.1.4
F5 BIG-IP Advanced Firewall Manager>=14.0.0<14.1.0.2
F5 BIG-IP Advanced Firewall Manager=12.1.1-hf2
F5 BIG-IP Analytics>=12.1.2<12.1.4.1
F5 BIG-IP Analytics>=13.0.0<13.1.1.4
F5 BIG-IP Analytics>=14.0.0<14.1.0.2
F5 BIG-IP Analytics=12.1.1-hf2
F5 BIG-IP Access Policy Manager>=12.1.2<12.1.4.1
F5 BIG-IP Access Policy Manager>=13.0.0<13.1.1.4
F5 BIG-IP Access Policy Manager>=14.0.0<14.1.0.2
F5 BIG-IP Access Policy Manager=12.1.1-hf2
F5 BIG-IP Application Security Manager>=12.1.2<12.1.4.1
F5 BIG-IP Application Security Manager>=13.0.0<13.1.1.4
F5 BIG-IP Application Security Manager>=14.0.0<14.1.0.2
F5 BIG-IP Application Security Manager=12.1.1-hf2
F5 Big-ip Domain Name System>=12.1.2<12.1.4.1
F5 Big-ip Domain Name System>=13.0.0<13.1.1.4
F5 Big-ip Domain Name System>=14.0.0<14.1.0.2
F5 Big-ip Domain Name System=12.1.1-hf2
F5 BIG-IP Edge Gateway>=12.1.2<12.1.4.1
F5 BIG-IP Edge Gateway>=13.0.0<13.1.1.4
F5 BIG-IP Edge Gateway>=14.0.0<14.1.0.2
F5 BIG-IP Edge Gateway=12.1.1-hf2
F5 Big-ip Fraud Protection Service>=12.1.2<12.1.4.1
F5 Big-ip Fraud Protection Service>=13.0.0<13.1.1.4
F5 Big-ip Fraud Protection Service>=14.0.0<14.1.0.2
F5 Big-ip Fraud Protection Service=12.1.1-hf2
F5 Big-ip Global Traffic Manager>=12.1.2<12.1.4.1
F5 Big-ip Global Traffic Manager>=13.0.0<13.1.1.4
F5 Big-ip Global Traffic Manager>=14.0.0<14.1.0.2
F5 Big-ip Global Traffic Manager=12.1.1-hf2
F5 Big-ip Link Controller>=12.1.2<12.1.4.1
F5 Big-ip Link Controller>=13.0.0<13.1.1.4
F5 Big-ip Link Controller>=14.0.0<14.1.0.2
F5 Big-ip Link Controller=12.1.1-hf2
F5 Big-ip Policy Enforcement Manager>=12.1.2<12.1.4.1
F5 Big-ip Policy Enforcement Manager>=13.0.0<13.1.1.4
F5 Big-ip Policy Enforcement Manager>=14.0.0<14.1.0.2
F5 Big-ip Policy Enforcement Manager=12.1.1-hf2
F5 Big-ip Webaccelerator>=12.1.2<12.1.4.1
F5 Big-ip Webaccelerator>=13.0.0<13.1.1.4
F5 Big-ip Webaccelerator>=14.0.0<14.1.0.2
F5 Big-ip Webaccelerator12.1.1=hf2
All of the following
Any of the following
F5 Big-ip Local Traffic Manager>=12.1.2<12.1.4.1
F5 Big-ip Local Traffic Manager>=13.0.0<13.1.1.4
F5 Big-ip Local Traffic Manager>=14.0.0<14.1.0.2
F5 Big-ip Local Traffic Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Application Acceleration Manager>=12.1.2<12.1.4.1
F5 Big-ip Application Acceleration Manager>=13.0.0<13.1.1.4
F5 Big-ip Application Acceleration Manager>=14.0.0<14.1.0.2
F5 Big-ip Application Acceleration Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 BIG-IP Advanced Firewall Manager>=12.1.2<12.1.4.1
F5 BIG-IP Advanced Firewall Manager>=13.0.0<13.1.1.4
F5 BIG-IP Advanced Firewall Manager>=14.0.0<14.1.0.2
F5 BIG-IP Advanced Firewall Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 BIG-IP Analytics>=12.1.2<12.1.4.1
F5 BIG-IP Analytics>=13.0.0<13.1.1.4
F5 BIG-IP Analytics>=14.0.0<14.1.0.2
F5 BIG-IP Analytics=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 BIG-IP Access Policy Manager>=12.1.2<12.1.4.1
F5 BIG-IP Access Policy Manager>=13.0.0<13.1.1.4
F5 BIG-IP Access Policy Manager>=14.0.0<14.1.0.2
F5 BIG-IP Access Policy Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 BIG-IP Application Security Manager>=12.1.2<12.1.4.1
F5 BIG-IP Application Security Manager>=13.0.0<13.1.1.4
F5 BIG-IP Application Security Manager>=14.0.0<14.1.0.2
F5 BIG-IP Application Security Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Domain Name System>=12.1.2<12.1.4.1
F5 Big-ip Domain Name System>=13.0.0<13.1.1.4
F5 Big-ip Domain Name System>=14.0.0<14.1.0.2
F5 Big-ip Domain Name System=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 BIG-IP Edge Gateway>=12.1.2<12.1.4.1
F5 BIG-IP Edge Gateway>=13.0.0<13.1.1.4
F5 BIG-IP Edge Gateway>=14.0.0<14.1.0.2
F5 BIG-IP Edge Gateway=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Fraud Protection Service>=12.1.2<12.1.4.1
F5 Big-ip Fraud Protection Service>=13.0.0<13.1.1.4
F5 Big-ip Fraud Protection Service>=14.0.0<14.1.0.2
F5 Big-ip Fraud Protection Service=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Global Traffic Manager>=12.1.2<12.1.4.1
F5 Big-ip Global Traffic Manager>=13.0.0<13.1.1.4
F5 Big-ip Global Traffic Manager>=14.0.0<14.1.0.2
F5 Big-ip Global Traffic Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Link Controller>=12.1.2<12.1.4.1
F5 Big-ip Link Controller>=13.0.0<13.1.1.4
F5 Big-ip Link Controller>=14.0.0<14.1.0.2
F5 Big-ip Link Controller=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Policy Enforcement Manager>=12.1.2<12.1.4.1
F5 Big-ip Policy Enforcement Manager>=13.0.0<13.1.1.4
F5 Big-ip Policy Enforcement Manager>=14.0.0<14.1.0.2
F5 Big-ip Policy Enforcement Manager=12.1.1-hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
All of the following
Any of the following
F5 Big-ip Webaccelerator>=12.1.2<12.1.4.1
F5 Big-ip Webaccelerator>=13.0.0<13.1.1.4
F5 Big-ip Webaccelerator>=14.0.0<14.1.0.2
F5 Big-ip Webaccelerator12.1.1=hf2
Any of the following
F5 Big-ip I10600
F5 Big-ip I10800
F5 Big-ip I11600
F5 Big-ip I11800
F5 Big-ip I15600
F5 Big-ip I15800
F5 Big-ip I2000s
F5 Big-ip I2200s
F5 Big-ip I4000s
F5 Big-ip I4200v
F5 Big-ip I5000s
F5 Big-ip I5050s
F5 Big-ip I5200v
F5 Big-ip I5250v
F5 Big-ip I5250v Fips
F5 Big-ip I7000
F5 Big-ip I7050s
F5 Big-ip I7055s
F5 Big-ip I7200v
F5 Big-ip I7200v-ssl
F5 Big-ip I7200v Fips
F5 Big-ip I7250v
F5 Big-ip I7255s
Event History
Apr 15, 2019
CVE Published
via MITRE·02:43 PM
Data Sourced
via MITRE·02:43 PM
DescriptionWeakness
Data Sourced
via NVD·03:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6609?
CVE-2019-6609 is classified as a platform-dependent vulnerability specifically impacting certain F5 BIG-IP systems.
2
How do I fix CVE-2019-6609?
To fix CVE-2019-6609, upgrade the affected F5 BIG-IP products to the patched versions provided by F5 Networks.
3
Which versions are affected by CVE-2019-6609?
CVE-2019-6609 affects F5 BIG-IP versions 14.0.0-14.1.0.1, 13.0.0-13.1.1.3, and 12.1.1 HF2-12.1.4.
4
Who is impacted by CVE-2019-6609?
CVE-2019-6609 primarily impacts organizations using F5 BIG-IP systems on iSeries platforms.
5
Is there a workaround for CVE-2019-6609?
F5 recommends upgrading systems to address CVE-2019-6609, as no specific workaround is provided.