CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-6593

On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle (MITM) attack, despite the attacker not having gained access to the server's private key itself. (CVE-2019-6593 also known as Zombie POODLE and GOLDENDOODLE.)

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.1%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2019-6593

F5 » Big-Ip Access Policy Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1
F5 » Big-Ip Access Policy Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2
F5 » Big-Ip Access Policy Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3
F5 » Big-Ip Access Policy Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4
F5 » Big-Ip Access Policy Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1
F5 » Big-Ip Access Policy Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3
F5 » Big-Ip Advanced Firewall Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4
F5 » Big-Ip Advanced Firewall Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1
F5 » Big-Ip Advanced Firewall Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0
F5 » Big-Ip Analytics » Version: 11.5.1

cpe:2.3:a:f5:big-ip_analytics:11.5.1
F5 » Big-Ip Analytics » Version: 11.5.2

cpe:2.3:a:f5:big-ip_analytics:11.5.2
F5 » Big-Ip Analytics » Version: 11.5.3

cpe:2.3:a:f5:big-ip_analytics:11.5.3
F5 » Big-Ip Analytics » Version: 11.5.4

cpe:2.3:a:f5:big-ip_analytics:11.5.4
F5 » Big-Ip Analytics » Version: 11.6.1

cpe:2.3:a:f5:big-ip_analytics:11.6.1
F5 » Big-Ip Analytics » Version: 12.1.0

cpe:2.3:a:f5:big-ip_analytics:12.1.0
F5 » Big-Ip Application Security Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1
F5 » Big-Ip Application Security Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2
F5 » Big-Ip Application Security Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3
F5 » Big-Ip Application Security Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4
F5 » Big-Ip Application Security Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1
F5 » Big-Ip Application Security Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0
F5 » Big-Ip Domain Name System » Version: 11.5.1

cpe:2.3:a:f5:big-ip_domain_name_system:11.5.1
F5 » Big-Ip Domain Name System » Version: 11.5.2

cpe:2.3:a:f5:big-ip_domain_name_system:11.5.2
F5 » Big-Ip Domain Name System » Version: 11.5.3

cpe:2.3:a:f5:big-ip_domain_name_system:11.5.3
F5 » Big-Ip Domain Name System » Version: 11.5.4

cpe:2.3:a:f5:big-ip_domain_name_system:11.5.4
F5 » Big-Ip Domain Name System » Version: 11.6.1

cpe:2.3:a:f5:big-ip_domain_name_system:11.6.1
F5 » Big-Ip Domain Name System » Version: 12.1.0

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0
F5 » Big-Ip Edge Gateway » Version: 11.5.1

cpe:2.3:a:f5:big-ip_edge_gateway:11.5.1
F5 » Big-Ip Edge Gateway » Version: 11.5.2

cpe:2.3:a:f5:big-ip_edge_gateway:11.5.2
F5 » Big-Ip Edge Gateway » Version: 11.5.3

cpe:2.3:a:f5:big-ip_edge_gateway:11.5.3
F5 » Big-Ip Edge Gateway » Version: 11.5.4

cpe:2.3:a:f5:big-ip_edge_gateway:11.5.4
F5 » Big-Ip Edge Gateway » Version: 11.6.1

cpe:2.3:a:f5:big-ip_edge_gateway:11.6.1
F5 » Big-Ip Edge Gateway » Version: 12.1.0

cpe:2.3:a:f5:big-ip_edge_gateway:12.1.0
F5 » Big-Ip Fraud Protection Service » Version: 11.5.1

cpe:2.3:a:f5:big-ip_fraud_protection_service:11.5.1
F5 » Big-Ip Fraud Protection Service » Version: 11.5.2

cpe:2.3:a:f5:big-ip_fraud_protection_service:11.5.2
F5 » Big-Ip Fraud Protection Service » Version: 11.5.3

cpe:2.3:a:f5:big-ip_fraud_protection_service:11.5.3
F5 » Big-Ip Fraud Protection Service » Version: 11.5.4

cpe:2.3:a:f5:big-ip_fraud_protection_service:11.5.4
F5 » Big-Ip Fraud Protection Service » Version: 11.6.1

cpe:2.3:a:f5:big-ip_fraud_protection_service:11.6.1
F5 » Big-Ip Fraud Protection Service » Version: 12.1.0

cpe:2.3:a:f5:big-ip_fraud_protection_service:12.1.0
F5 » Big-Ip Global Traffic Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1
F5 » Big-Ip Global Traffic Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2
F5 » Big-Ip Global Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3
F5 » Big-Ip Global Traffic Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4
F5 » Big-Ip Global Traffic Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1
F5 » Big-Ip Global Traffic Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.0
F5 » Big-Ip Link Controller » Version: 11.5.1

cpe:2.3:a:f5:big-ip_link_controller:11.5.1
F5 » Big-Ip Link Controller » Version: 11.5.2

cpe:2.3:a:f5:big-ip_link_controller:11.5.2
F5 » Big-Ip Link Controller » Version: 11.5.3

cpe:2.3:a:f5:big-ip_link_controller:11.5.3
F5 » Big-Ip Link Controller » Version: 11.5.4

cpe:2.3:a:f5:big-ip_link_controller:11.5.4
F5 » Big-Ip Link Controller » Version: 11.6.1

cpe:2.3:a:f5:big-ip_link_controller:11.6.1
F5 » Big-Ip Link Controller » Version: 12.1.0

cpe:2.3:a:f5:big-ip_link_controller:12.1.0
F5 » Big-Ip Local Traffic Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1
F5 » Big-Ip Local Traffic Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2
F5 » Big-Ip Local Traffic Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3
F5 » Big-Ip Local Traffic Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4
F5 » Big-Ip Local Traffic Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1
F5 » Big-Ip Local Traffic Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.3

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3
F5 » Big-Ip Policy Enforcement Manager » Version: 11.5.4

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4
F5 » Big-Ip Policy Enforcement Manager » Version: 11.6.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1
F5 » Big-Ip Policy Enforcement Manager » Version: 12.1.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0
F5 » Big-Ip Webaccelerator » Version: 11.5.1

cpe:2.3:a:f5:big-ip_webaccelerator:11.5.1
F5 » Big-Ip Webaccelerator » Version: 11.5.2

cpe:2.3:a:f5:big-ip_webaccelerator:11.5.2
F5 » Big-Ip Webaccelerator » Version: 11.5.3

cpe:2.3:a:f5:big-ip_webaccelerator:11.5.3
F5 » Big-Ip Webaccelerator » Version: 11.5.4

cpe:2.3:a:f5:big-ip_webaccelerator:11.5.4
F5 » Big-Ip Webaccelerator » Version: 11.6.1

cpe:2.3:a:f5:big-ip_webaccelerator:11.6.1
F5 » Big-Ip Webaccelerator » Version: 12.1.0

cpe:2.3:a:f5:big-ip_webaccelerator:12.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-6593

Products

Pricing

Contact Us