Multiple F5 BIG-IP Products CVE-2019-6602 Security Bypass Vulnerability

Bugtraq ID:	107626
Class:	Configuration Error
CVE:	CVE-2019-6602
Remote:	Yes
Local:	No
Published:	Mar 21 2019 12:00AM
Updated:	Mar 21 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	F5 BIG-IP WebAccelerator 11.6.3 F5 BIG-IP WebAccelerator 11.6.2 F5 BIG-IP WebAccelerator 11.6.1 F5 BIG-IP WebAccelerator 11.5.8 F5 BIG-IP WebAccelerator 11.5.7 F5 BIG-IP WebAccelerator 11.5.6 F5 BIG-IP WebAccelerator 11.5.5 F5 BIG-IP WebAccelerator 11.5.1 F5 BIG-IP PEM 11.6.3 F5 BIG-IP PEM 11.6.2 F5 BIG-IP PEM 11.6.1 F5 BIG-IP PEM 11.5.8 F5 BIG-IP PEM 11.5.7 F5 BIG-IP PEM 11.5.6 F5 BIG-IP PEM 11.5.3 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5.5 F5 BIG-IP PEM 11.5.4 F5 BIG-IP LTM 11.6.3 F5 BIG-IP LTM 11.6.2 F5 BIG-IP LTM 11.6.1 F5 BIG-IP LTM 11.5.8 F5 BIG-IP LTM 11.5.7 F5 BIG-IP LTM 11.5.6 F5 BIG-IP LTM 11.5.5 F5 BIG-IP LTM 11.5.3 F5 BIG-IP LTM 11.5.2 F5 BIG-IP LTM 11.5.1 F5 BIG-IP LTM 11.5.4 F5 BIG-IP Link Controller 11.6.3 F5 BIG-IP Link Controller 11.6.2 F5 BIG-IP Link Controller 11.6.1 F5 BIG-IP GTM 11.6.3 F5 BIG-IP GTM 11.6.2 F5 BIG-IP GTM 11.6.1 F5 BIG-IP FPS 11.6.3 F5 BIG-IP FPS 11.6.2 F5 BIG-IP FPS 11.6.1 F5 BIG-IP Edge Gateway 11.6.3 F5 BIG-IP Edge Gateway 11.6.2 F5 BIG-IP Edge Gateway 11.6.1 F5 BIG-IP DNS 11.6.3 F5 BIG-IP DNS 11.6.2 F5 BIG-IP DNS 11.6.1 F5 BIG-IP ASM 11.6.3 F5 BIG-IP ASM 11.6.2 F5 BIG-IP ASM 11.6.1 F5 BIG-IP APM 11.6.3 F5 BIG-IP APM 11.6.2 F5 BIG-IP APM 11.6.1 F5 BIG-IP Analytics 11.6.3 F5 BIG-IP Analytics 11.6.2 F5 BIG-IP Analytics 11.6.1 F5 BIG-IP Analytics 11.5.8 F5 BIG-IP Analytics 11.5.7 F5 BIG-IP Analytics 11.5.6 F5 BIG-IP Analytics 11.5.3 F5 BIG-IP Analytics 11.5.2 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.5.5 F5 BIG-IP Analytics 11.5.4 F5 BIG-IP AFM 11.6.3 F5 BIG-IP AFM 11.6.1 F5 BIG-IP AFM 11.5.8 F5 BIG-IP AFM 11.5.7 F5 BIG-IP AFM 11.5.6 F5 BIG-IP AFM 11.5.3 F5 BIG-IP AFM 11.5.2 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.6.2 F5 BIG-IP AFM 11.5.5 F5 BIG-IP AFM 11.5.4 F5 BIG-IP AAM 11.6.3 F5 BIG-IP AAM 11.6.2 F5 BIG-IP AAM 11.6.1 F5 BIG-IP AAM 11.5.8 F5 BIG-IP AAM 11.5.7 F5 BIG-IP AAM 11.5.5 F5 BIG-IP AAM 11.5.3 F5 BIG-IP AAM 11.5.2 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5.4
Not Vulnerable:	F5 BIG-IP WebAccelerator 12.0 F5 BIG-IP WebAccelerator 11.6.4 F5 BIG-IP WebAccelerator 11.5.9 F5 BIG-IP PEM 12.0 F5 BIG-IP PEM 11.6.4 F5 BIG-IP PEM 11.5.9 F5 BIG-IP LTM 12.0 F5 BIG-IP LTM 11.6.4 F5 BIG-IP LTM 11.5.9 F5 BIG-IP Link Controller 12.0 F5 BIG-IP Link Controller 11.6.4 F5 BIG-IP GTM 12.0 F5 BIG-IP GTM 11.6.4 F5 BIG-IP FPS 12.0 F5 BIG-IP FPS 11.6.4 F5 BIG-IP DNS 12.0 F5 BIG-IP DNS 11.6.4 F5 BIG-IP ASM 12.0 F5 BIG-IP ASM 11.6.4 F5 BIG-IP APM 12.0 F5 BIG-IP APM 11.6.4 F5 BIG-IP Analytics 12.0 F5 BIG-IP Analytics 11.6.4 F5 BIG-IP Analytics 11.5.9 F5 BIG-IP AFM 12.0 F5 BIG-IP AFM 11.6.4 F5 BIG-IP AFM 11.5.9 F5 BIG-IP AAM 12.0 F5 BIG-IP AAM 11.6.4 F5 BIG-IP AAM 11.5.9

Multiple F5 BIG-IP Products CVE-2019-6602 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple F5 BIG-IP Products CVE-2019-6602 Security Bypass Vulnerability

References:

• F5 BIG-IP Homepage (F5)
  
• K11818407: REST Framework vulnerability CVE-2019-6602 (F5)