K44885536: iControl REST vulnerability CVE-2019-6622

Security Advisory Description Undisclosed iControl REST worker is vulnerable to command injection by an administrator or resource administrator user. This attack is only exploitable on multi-bladed systems. The vulnerability allows bypass of Appliance mode security on BIG-IP systems by allowing t...

CVE-2019-6622

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, an undisclosed iControl REST worker is vulnerable to command injection by an administrator or resource administrator user. This attack is only exploitable on multi-bladed systems...

CVE-2019-6622

CVE-2019-6622 affects BIG-IP iControl REST: an undisclosed worker is vulnerable to command injection by an administrator on multi-bladed systems. Affected versions include BIG-IP 11.5.1–11.6.4, 12.1.0–12.1.4.1, 13.0.0–13.1.1.4, and 14.0.0–14.1.0.5 (plus 14.1.0). Impact is remote execution of arbi...