cnvd - cnvd-2020-00247

cnvd-2020-00247

Vulnerability from cnvd

Title: 多款F5产品输入验证错误漏洞

Description:

F5 BIG-IP等都是美国F5公司的产品。F5 BIG-IP是一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。F5 Enterprise Manager是一款提供了整个BIG-IP应用交付基础架构的视图和优化应用性能的工具。F5 BIG-IQ是一套基于软件的云管理解决方案。

多款F5产品中存在输入验证错误漏洞，攻击者可利用该漏洞访问文件系统上被限制的对象。

Severity: 低

Formal description:

厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://www.f5.com/

Reference: https://support.f5.com/csp/article/K21711352 https://www.auscert.org.au/bulletins/ESB-2019.4768/

Impacted products

Name
['F5 Enterprise Manager 3.1.1', 'F5 BIG-IQ >=6.0.0，<=6.1.0', 'F5 BIG-IP >=12.1.0，<=12.1.5', 'F5 F5 iWorkflow 2.3.0', 'F5 BIG-IP >=11.5.2，<=11.6.5.1', 'F5 BIG-IP >=13.1.0，<=13.1.3.2', 'F5 BIG-IP >=15.0.0，<=15.1.0', 'F5 BIG-IP >=14.0.0，<=14.1.2.3', 'F5 BIG-IQ >=5.0.0，<=5.4.0', 'F5 BIG-IQ 7.0.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-19151"
    }
  },
  "description": "F5 BIG-IP\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP\u662f\u4e00\u6b3e\u96c6\u6210\u4e86\u7f51\u7edc\u6d41\u91cf\u7ba1\u7406\u3001\u5e94\u7528\u7a0b\u5e8f\u5b89\u5168\u7ba1\u7406\u3001\u8d1f\u8f7d\u5747\u8861\u7b49\u529f\u80fd\u7684\u5e94\u7528\u4ea4\u4ed8\u5e73\u53f0\u3002F5 Enterprise Manager\u662f\u4e00\u6b3e\u63d0\u4f9b\u4e86\u6574\u4e2aBIG-IP\u5e94\u7528\u4ea4\u4ed8\u57fa\u7840\u67b6\u6784\u7684\u89c6\u56fe\u548c\u4f18\u5316\u5e94\u7528\u6027\u80fd\u7684\u5de5\u5177\u3002F5 BIG-IQ\u662f\u4e00\u5957\u57fa\u4e8e\u8f6f\u4ef6\u7684\u4e91\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\n\n\u591a\u6b3eF5\u4ea7\u54c1\u4e2d\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u6587\u4ef6\u7cfb\u7edf\u4e0a\u88ab\u9650\u5236\u7684\u5bf9\u8c61\u3002",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://www.f5.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-00247",
  "openTime": "2020-01-03",
  "products": {
    "product": [
      "F5 Enterprise Manager 3.1.1",
      "F5 BIG-IQ \u003e=6.0.0\uff0c\u003c=6.1.0",
      "F5 BIG-IP \u003e=12.1.0\uff0c\u003c=12.1.5",
      "F5 F5 iWorkflow 2.3.0",
      "F5 BIG-IP \u003e=11.5.2\uff0c\u003c=11.6.5.1",
      "F5 BIG-IP \u003e=13.1.0\uff0c\u003c=13.1.3.2",
      "F5 BIG-IP \u003e=15.0.0\uff0c\u003c=15.1.0",
      "F5 BIG-IP \u003e=14.0.0\uff0c\u003c=14.1.2.3",
      "F5 BIG-IQ \u003e=5.0.0\uff0c\u003c=5.4.0",
      "F5 BIG-IQ 7.0.0"
    ]
  },
  "referenceLink": "https://support.f5.com/csp/article/K21711352\r\nhttps://www.auscert.org.au/bulletins/ESB-2019.4768/",
  "serverity": "\u4f4e",
  "submitTime": "2019-12-24",
  "title": "\u591a\u6b3eF5\u4ea7\u54c1\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2019-19151 (GCVE-0-2019-19151)

Vulnerability from cvelistv5

Published

2019-12-23 18:03

Modified

2024-08-05 02:09

Severity ?

CWE

Privilege Escalation

Summary

On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed.

References

▼	URL	Tags
	https://support.f5.com/csp/article/K21711352	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	F5	BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager	Version: BIG-IP 15.0.0-15.1.0 Version: 14.0.0-14.1.2.3 Version: 13.1.0-13.1.3.2 Version: 12.1.0-12.1.5 Version: 11.5.2-11.6.5.1 Version: BIG-IQ 7.0.0 Version: 6.0.0-6.1.0 Version: 5.0.0-5.4.0 Version: iWorkflow 2.3.0 Version: Enterprise Manager 3.1.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:39.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K21711352"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager",
          "vendor": "F5",
          "versions": [
            {
              "status": "affected",
              "version": "BIG-IP 15.0.0-15.1.0"
            },
            {
              "status": "affected",
              "version": "14.0.0-14.1.2.3"
            },
            {
              "status": "affected",
              "version": "13.1.0-13.1.3.2"
            },
            {
              "status": "affected",
              "version": "12.1.0-12.1.5"
            },
            {
              "status": "affected",
              "version": "11.5.2-11.6.5.1"
            },
            {
              "status": "affected",
              "version": "BIG-IQ 7.0.0"
            },
            {
              "status": "affected",
              "version": "6.0.0-6.1.0"
            },
            {
              "status": "affected",
              "version": "5.0.0-5.4.0"
            },
            {
              "status": "affected",
              "version": "iWorkflow 2.3.0"
            },
            {
              "status": "affected",
              "version": "Enterprise Manager 3.1.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-23T18:03:02",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K21711352"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "f5sirt@f5.com",
          "ID": "CVE-2019-19151",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "BIG-IP 15.0.0-15.1.0"
                          },
                          {
                            "version_value": "14.0.0-14.1.2.3"
                          },
                          {
                            "version_value": "13.1.0-13.1.3.2"
                          },
                          {
                            "version_value": "12.1.0-12.1.5"
                          },
                          {
                            "version_value": "11.5.2-11.6.5.1"
                          },
                          {
                            "version_value": "BIG-IQ 7.0.0"
                          },
                          {
                            "version_value": "6.0.0-6.1.0"
                          },
                          {
                            "version_value": "5.0.0-5.4.0"
                          },
                          {
                            "version_value": "iWorkflow 2.3.0"
                          },
                          {
                            "version_value": "Enterprise Manager 3.1.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "F5"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version 2.3.0, and Enterprise Manager version 3.1.1, authenticated users granted TMOS Shell (tmsh) privileges are able access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to access objects on the file system which would not normally be allowed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.f5.com/csp/article/K21711352",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K21711352"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2019-19151",
    "datePublished": "2019-12-23T18:03:02",
    "dateReserved": "2019-11-21T00:00:00",
    "dateUpdated": "2024-08-05T02:09:39.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted