K64855220 : F5 TMUI and iControl Rest vulnerability CVE-2019-6634

Security Advisory Description

High volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The attack requires an authenticated user with any role. (CVE-2019-6634)

Note: TheNo Access user role is technically a role, but a user with this access role cannot log in and cannot carry out the attack.

Impact

This vulnerability allows an authenticated user to cause a disruption of service.