Servers and applications
CVE-2019-6593
On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle (MITM) attack, despite the attacker not having gained access to the server's private key itself. (CVE-2019-6593 also known as…
- Severity
- Medium 5.9
- Published
- 26 Feb 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 0.7% in the next 30 daysHigher than 51% of CVEs. EPSS by FIRST, 10 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager |
|
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager |
|