UpHeron
All vulnerabilities

Servers and applications

CVE-2019-6609

Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 14.0.0-14.1.0.1, 13.0.0-13.1.1.3, and 12.1.1 HF2-12.1.4, the secureKeyCapable attribute was not set which causes secure vault to not use the F5 hardware support to store the unit key.…

Severity
Critical 9.8
Published
15 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
12.1.4.1, 13.1.1.4, 14.1.0.2
Exploit chance
1.5% in the next 30 daysHigher than 73% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 12.1.1-hf2
  • From 12.1.2 before 12.1.4.1
  • From 13.0.0 before 13.1.1.4
  • From 14.0.0 before 14.1.0.2
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 12.1.1-hf2
  • From 12.1.2 before 12.1.4.1
  • From 13.0.0 before 13.1.1.4
  • From 14.0.0 before 14.1.0.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-6609
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-6609