Description
On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP APM system logs the client-session-id when a per-session policy is attached to the virtual server with debug logging enabled.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| F5 | BIG-IP APM | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2019-8782 | On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP APM system logs the client-session-id when a per-session policy is attached to the virtual server with debug logging enabled. |
References
| Link | Providers |
|---|---|
| https://support.f5.com/csp/article/K37890841 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: f5
Published:
Updated: 2024-08-05T02:09:39.374Z
Reserved: 2019-11-21T00:00:00.000Z
Link: CVE-2019-19150
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-12-23T18:15:10.833
Modified: 2024-11-21T04:34:15.870
Link: CVE-2019-19150
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses