CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects BIG-IP.
CVE
CVE-2019-6632
Severity
MEDIUM
CVSS
5.5
EPSS
0.37%
BIG-IP
Original NVD Description
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to encrypted configuration and/or UCS files.
Related CVEs
Other vulnerabilities affecting the same vendor(s)