CVE-2019-6610: Critical severity f5 access policy manager vulnerability
Published Apr 11, 2019
·Updated
On BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8, the system is vulnerable to a denial of service attack when performing URL classification.
Affected Software
5 affected components
F5 BIG-IP Access Policy Manager>=11.5.1<=11.5.8
F5 BIG-IP Access Policy Manager>=11.6.1<=11.6.3
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.4
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1
F5 BIG-IP Access Policy Manager=14.0.0
Event History
Apr 11, 2019
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
DescriptionWeakness
Data Sourced
via NVD·06:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6610?
CVE-2019-6610 has a severity rating that indicates it can lead to a denial of service attack.
2
How do I fix CVE-2019-6610?
To mitigate CVE-2019-6610, upgrade to a non-vulnerable version of the F5 BIG-IP Access Policy Manager.
3
Which versions are affected by CVE-2019-6610?
CVE-2019-6610 affects BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8.
4
What type of attack does CVE-2019-6610 vulnerability allow?
CVE-2019-6610 allows for a denial of service attack when performing URL classification.
5
Is CVE-2019-6610 easy to exploit?
The exploitation of CVE-2019-6610 can result in significant system disruption, making it a serious concern.