CVE-2019-6601
CVE-2019-6601
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
13 Mar 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.
Affected products
F5 Networks, Inc. · BIG-IP (AAM)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →