On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions…

Description

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5 and BIG-IQ versions 6.0.0-6.1.0 and 5.2.0-5.4.0, a user is able to obtain the secret that was being used to encrypt a BIG-IP UCS backup file while sending SNMP query to the BIG-IP or BIG-IQ system, however the user can not access to the UCS files.

Scores

EPSS (exploitation in 30 days)

0.70% · top 47% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

• Information disclosure

Affected products

• F5 · BIG-IP

  • affected BIG-IP 15.0.0-15.0.1.1
  • affected 14.1.0-14.1.2.2
  • affected 14.0.0-14.0.1
  • affected 13.1.0-13.1.3.1
  • affected 12.1.0-12.1.5
  • affected 11.5.2-11.6.5

• F5 · BIG-IQ

  • affected BIG-IQ 6.0.0-6.1.0
  • affected 5.2.0-5.4.0

References (1)

• https://support.f5.com/csp/article/K25607522 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-6688](https://trackcve.app/badge/CVE-2019-6688.svg)](https://trackcve.app/cve/CVE-2019-6688)

Record last updated 4 Aug 2024, 20:31 UTC.