Information disclosure

🗓️ 23 Dec 2019 19:15:00Reported by PRIOn knowledge baseType

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2019-19151	16 Mar 202415:21	–	circl
CNVD	Multiple F5 Products Input Validation Error Vulnerability	24 Dec 201900:00	–	cnvd
CVE	CVE-2019-19151	23 Dec 201918:03	–	cve
Cvelist	CVE-2019-19151	23 Dec 201918:03	–	cvelist
EUVD	EUVD-2019-8783	7 Oct 202500:30	–	euvd
F5 Networks	K21711352: TMOS Shell vulnerability CVE-2019-19151	21 Feb 202320:02	–	f5
Tenable Nessus	F5 Networks BIG-IP : TMOS Shell vulnerability (K21711352)	1 May 202000:00	–	nessus
NVD	CVE-2019-19151	23 Dec 201919:15	–	nvd
OSV	CVE-2019-19151	23 Dec 201919:15	–	osv
RedhatCVE	CVE-2019-19151	22 May 202508:25	–	redhatcve