Privilege Escalation Vulnerability in BIG-IP and Enterprise Manager REST Users

Privilege Escalation Vulnerability in BIG-IP and Enterprise Manager REST Users

CVE-2019-6646 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges.

Learn more about our User Device Pen Test.