CVE-2019-6648: F5 Container Ingress Service

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

On version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes and Red Hat OpenShift (k8s-bigip-ctlr) log files may contain BIG-IP secrets such as SSL Private Keys and Private key Passphrases as provided as inputs by an AS3 Declaration.

Affected products

• F5 Container Ingress Service: version 1.9.0 only
• Red Hat Openshift: affected versions not specified

Published 2019-09-04. Last modified 2026-06-17.