K11818407 : REST Framework vulnerability CVE-2019-6602

Security Advisory Description

The Configuration utility login page may not follow best security practices when handling a malicious request. (CVE-2019-6602)

Impact

BIG-IP

The Configuration utility login page returns an inconsistent HTTP response when processing modified requests; this may provide clues to an attacker looking to exploit vulnerabilities on the system.

BIG-IQ, Enterprise Manager, F5 iWorkflow, Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.