CVE-2019-6648 in F5 Networks and Red Hat Products
Published on September 4, 2019
On version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes and Red Hat OpenShift (k8s-bigip-ctlr) log files may contain BIG-IP secrets such as SSL Private Keys and Private key Passphrases as provided as inputs by an AS3 Declaration.
Products Associated with CVE-2019-6648
stack.watch emails you whenever new vulnerabilities are published in F5 Networks Container Ingress Service or Red Hat Openshift. Just hit a watch button to start following.
Exploit Probability
EPSS
0.11%
Percentile
29.05%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.