CVE-2019-6653

Name of the Vulnerable Software and Affected Versions F5 BIG-IQ versions 5.2.0 through 5.4.0 F5 BIG-IQ versions 6.0.0 through 6.1.0

Description The issue is related to a Stored Cross Site Scripting vulnerability in an undisclosed page of the system. This can be exploited by users with the Device Manager and Administrator roles.

Recommendations For F5 BIG-IQ versions 5.2.0 through 5.4.0, update to a version that includes the fix for this issue. For F5 BIG-IQ versions 6.0.0 through 6.1.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the undisclosed page for users with the Device Manager and Administrator roles until a patch is available.