CVE-2019-6615

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.5.2 through 11.5.8 BIG-IP versions 11.6.1 through 11.6.3.4 BIG-IP versions 12.1.0 through 12.1.4 BIG-IP versions 13.0.0 through 13.1.1.4 BIG-IP versions 14.0.0 through 14.1.0.1

Description The issue allows Administrator and Resource Administrator roles to potentially bypass Appliance Mode restrictions on BIG-IP systems by exploiting TMSH access.

Recommendations For BIG-IP versions 11.5.2 through 11.5.8, restrict TMSH access to prevent exploitation. For BIG-IP versions 11.6.1 through 11.6.3.4, restrict TMSH access to prevent exploitation. For BIG-IP versions 12.1.0 through 12.1.4, restrict TMSH access to prevent exploitation. For BIG-IP versions 13.0.0 through 13.1.1.4, restrict TMSH access to prevent exploitation. For BIG-IP versions 14.0.0 through 14.1.0.1, restrict TMSH access to prevent exploitation.