Описание
X509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP.
Ссылки
- Third Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 11.6.0 (включая) до 11.6.2 (включая)Версия от 12.1.0 (включая) до 12.1.2 (включая)
Одно из
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 27%
0.00098
Низкий
4.8 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-295
Связанные уязвимости
CVSS3: 4.8
github
больше 3 лет назад
X509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP.
EPSS
Процентиль: 27%
0.00098
Низкий
4.8 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-295