K67825238 : iControl REST vulnerability CVE-2019-6638

Security Advisory Description

Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process. (CVE-2019-6638)

Impact

All authenticated users, regardless of role, can exploit this vulnerability, which can result in a denial-of-service (DoS) for all iControl REST operations. This impacts control plane iControl REST functionality and some portions of the Configuration utility. Data plane traffic is not impacted by this issue.