CVE-2019-6652 - In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS)

Back Back to CVE browser

MEDIUM

In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS)

Published Sep 25, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.59%

Description

In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS).

Affected products

Vendor n/a Product Big-IQ Default
n/a
- Version
  6.0.0-6.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Big-IQ

n/a

Version	Status	Constraints
6.0.0-6.1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-306

Missing Authentication

CWE-319

References (2)

https://support.f5.com/csp/article/K23101430
x_refsource_MISCMitigationVendor Advisory
https://support.f5.com/csp/article/K23101430?utm_source=f5support&amp%3Butm_medium=RSS
x_refsource_CONFIRM

Link	Providers	Tags
https://support.f5.com/csp/article/K23101430		x_refsource_MISCMitigationVendor Advisory
https://support.f5.com/csp/article/K23101430?utm_source=f5support&amp%3Butm_medium=RSS		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner f5

Published Sep 25, 2019

Updated Aug 4, 2024

Reserved Jan 22, 2019

Link CVE-2019-6652

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-6652

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-6652