{"id":"CVE-2019-6642","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-6642","generatedAt":"2026-10-27T23:27:08.819Z","title":"In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can…","description":"In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.","published":"2019-07-01T21:15:11.000Z","lastModified":"2026-06-17T02:39:25.000Z","status":"Modified","sourceIdentifier":"f5sirt@f5.com","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["f5/big-ip access policy manager","f5/big-ip advanced firewall manager","f5/big-ip application acceleration manager","f5/big-ip link controller","f5/big-ip policy enforcement manager","f5/big-ip webaccelerator","f5/big-ip application security manager","f5/big-ip local traffic manager","f5/big-ip fraud protection service","f5/big-ip global traffic manager","f5/big-ip analytics","f5/big-ip edge gateway","f5/big-ip domain name system","f5/big-iq centralized management","f5/enterprise manager","f5/iworkflow"],"epss":{"score":0.01788,"percentile":0.78186,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.79%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.f5.com/csp/article/K40378764","tags":["Vendor Advisory"],"source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K40378764?utm_source=f5support&amp%3Butm_medium=RSS","source":"f5sirt@f5.com"},{"url":"https://support.f5.com/csp/article/K40378764","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K40378764?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-6642","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}